diff --git a/test/mandatory/filter-limit.lua b/test/mandatory/filter-limit.lua index a45540d3b5e94a757ffb1d428d031011baaf26fc..00c6dcf2f7b5cd95e6131d9db031458872580371 100644 --- a/test/mandatory/filter-limit.lua +++ b/test/mandatory/filter-limit.lua @@ -38,16 +38,18 @@ function add(limit_type, filter) add_limit(limit) if not high_rate then - limit.name = 'A' + for _, name in ipairs{'A', 'C'} do + limit.name = name - for _, addr in ipairs{false, 'dest'} do - limit.addr = addr or nil + for _, addr in ipairs{false, 'dest'} do + limit.addr = addr or nil - limit.update = nil - add_limit(limit) + limit.update = nil + add_limit(limit) - limit.update = false - add_limit(limit) + limit.update = false + add_limit(limit) + end end end end @@ -59,7 +61,9 @@ add('conn', {out='B'}) add('flow') add('flow', {['in']='A', out='_fw', ['no-track']=true}) -table.insert(res, {['update-limit']='A'}) +for _, name in ipairs{'A', 'B', 'C', 'D'} do + table.insert(res, {['update-limit']=name}) +end for _, measure in ipairs{'conn', 'flow'} do for _, addr in ipairs{'src', 'dest'} do diff --git a/test/mandatory/limit.json b/test/mandatory/limit.json new file mode 100644 index 0000000000000000000000000000000000000000..8fff64be53980982303ddfbfabbab462e461bca0 --- /dev/null +++ b/test/mandatory/limit.json @@ -0,0 +1 @@ +{ "limit": { "B": true, "C": 7, "D": { "inet": 22, "inet6": 58 } } } diff --git a/test/output/dump b/test/output/dump index 69165352001a9da0b7332bc7d45a941cb5c4d76f..64a0272e117b41d437876f963fdbc94c63768e2d 100644 --- a/test/output/dump +++ b/test/output/dump @@ -598,2230 +598,3802 @@ Filter 42 {"action":"pass","conn-limit":{"addr":"dest", inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36 -Filter 43 {"conn-limit":{"log":false},"out":"B"} +Filter 43 {"conn-limit":{"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-36 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-36 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-36 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-36 - inet/filter/limit-36 -m recent --name limit-36 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-36 -m recent --name limit-36 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-36 -m recent --name limit-36 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-36 -m recent --name limit-36 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-37 + inet6/filter/limit-36 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-37 + inet/filter/logdrop-37 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-37 -m limit --limit 1/second -j LOG + inet/filter/logdrop-37 -j DROP + inet6/filter/logdrop-37 -j DROP + inet/filter/limit-36 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-36 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 44 {"action":"pass","conn-limit":{"log":false},"out":"B"} +Filter 44 {"action":"pass","conn-limit":{"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-37 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-37 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-37 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-37 - inet/filter/limit-37 -m recent --name limit-37 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-37 -m recent --name limit-37 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-37 -m recent --name limit-37 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-37 -m recent --name limit-37 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-38 + inet6/filter/limit-37 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-38 + inet/filter/logdrop-38 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-38 -m limit --limit 1/second -j LOG + inet/filter/logdrop-38 -j DROP + inet6/filter/logdrop-38 -j DROP + inet/filter/limit-37 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-37 -m recent --name user:C --rsource --mask fe00:: --set -Filter 45 {"conn-limit":{"log":false},"log":true,"out":"B"} +Filter 45 {"conn-limit":{"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-38 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-38 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-38 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-38 - inet/filter/limit-38 -m recent --name limit-38 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-38 -m recent --name limit-38 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-39 + inet6/filter/limit-38 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-39 + inet/filter/logdrop-39 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-39 -m limit --limit 1/second -j LOG + inet/filter/logdrop-39 -j DROP + inet6/filter/logdrop-39 -j DROP inet/filter/limit-38 -m limit --limit 1/second -j LOG inet6/filter/limit-38 -m limit --limit 1/second -j LOG - inet/filter/limit-38 -m recent --name limit-38 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-38 -m recent --name limit-38 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-38 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-38 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 46 {"action":"pass","conn-limit":{"log":false},"log":true,"out":"B"} +Filter 46 {"action":"pass","conn-limit":{"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-39 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-39 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-39 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-39 - inet/filter/limit-39 -m recent --name limit-39 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-39 -m recent --name limit-39 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-39 -m recent --name limit-39 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-39 -m recent --name limit-39 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-40 + inet6/filter/limit-39 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-40 + inet/filter/logdrop-40 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-40 -m limit --limit 1/second -j LOG + inet/filter/logdrop-40 -j DROP + inet6/filter/logdrop-40 -j DROP + inet/filter/limit-39 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-39 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 47 {"conn-limit":{"log":false},"log":"none","out":"B"} +Filter 47 {"conn-limit":{"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-40 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-40 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-40 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-40 - inet/filter/limit-40 -m recent --name limit-40 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-40 -m recent --name limit-40 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-40 -m recent --name limit-40 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-40 -m recent --name limit-40 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-41 + inet6/filter/limit-40 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-41 + inet/filter/logdrop-41 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-41 -m limit --limit 1/second -j LOG + inet/filter/logdrop-41 -j DROP + inet6/filter/logdrop-41 -j DROP + inet/filter/limit-40 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-40 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 48 {"action":"pass","conn-limit":{"log":false},"log":"none","out":"B"} +Filter 48 {"action":"pass","conn-limit":{"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-41 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-41 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-41 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-41 - inet/filter/limit-41 -m recent --name limit-41 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-41 -m recent --name limit-41 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-41 -m recent --name limit-41 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-41 -m recent --name limit-41 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-42 + inet6/filter/limit-41 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-42 + inet/filter/logdrop-42 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-42 -m limit --limit 1/second -j LOG + inet/filter/logdrop-42 -j DROP + inet6/filter/logdrop-42 -j DROP + inet/filter/limit-41 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-41 -m recent --name user:C --rsource --mask fe00:: --set -Filter 49 {"conn-limit":{"log":false,"name":"A"},"out":"B"} +Filter 49 {"conn-limit":{"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-42 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-42 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-42 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-42 - inet/filter/limit-42 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-42 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-42 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-42 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-42 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-43 + inet6/filter/limit-42 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-43 + inet/filter/logdrop-43 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-43 -m limit --limit 1/second -j LOG + inet/filter/logdrop-43 -j DROP + inet6/filter/logdrop-43 -j DROP + inet/filter/limit-42 -j ACCEPT + inet6/filter/limit-42 -j ACCEPT -Filter 50 {"action":"pass","conn-limit":{"log":false,"name":"A"},"out":"B"} +Filter 50 {"action":"pass","conn-limit":{"name":"C","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-43 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-43 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-43 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-43 - inet/filter/limit-43 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-43 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-43 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-43 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44 -Filter 51 {"conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} +Filter 51 {"conn-limit":{"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-44 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-44 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-44 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-44 - inet/filter/limit-44 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-44 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-44 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-45 + inet6/filter/limit-44 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-45 + inet/filter/logdrop-45 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-45 -m limit --limit 1/second -j LOG + inet/filter/logdrop-45 -j DROP + inet6/filter/logdrop-45 -j DROP inet/filter/limit-44 -m limit --limit 1/second -j LOG inet6/filter/limit-44 -m limit --limit 1/second -j LOG - inet/filter/limit-44 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-44 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-44 -j ACCEPT + inet6/filter/limit-44 -j ACCEPT -Filter 52 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} +Filter 52 {"action":"pass","conn-limit":{"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-45 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-45 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-45 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-45 - inet/filter/limit-45 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-45 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-45 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-45 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-45 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-46 + inet6/filter/limit-45 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-46 + inet/filter/logdrop-46 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-46 -m limit --limit 1/second -j LOG + inet/filter/logdrop-46 -j DROP + inet6/filter/logdrop-46 -j DROP + inet/filter/limit-45 -m limit --limit 1/second -j LOG + inet6/filter/limit-45 -m limit --limit 1/second -j LOG -Filter 53 {"conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} +Filter 53 {"conn-limit":{"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-46 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-46 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-46 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-46 - inet/filter/limit-46 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-46 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-46 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-46 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-46 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-47 + inet6/filter/limit-46 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-47 + inet/filter/logdrop-47 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-47 -m limit --limit 1/second -j LOG + inet/filter/logdrop-47 -j DROP + inet6/filter/logdrop-47 -j DROP + inet/filter/limit-46 -j ACCEPT + inet6/filter/limit-46 -j ACCEPT -Filter 54 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} +Filter 54 {"action":"pass","conn-limit":{"name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-47 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-47 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-47 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-47 - inet/filter/limit-47 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-47 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-47 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-47 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48 -Filter 55 {"conn-limit":{"log":false,"name":"A","update":false},"out":"B"} +Filter 55 {"conn-limit":{"addr":"dest","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-48 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-48 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-48 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-48 - inet/filter/limit-48 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-48 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-48 -j ACCEPT - inet6/filter/limit-48 -j ACCEPT - -Filter 56 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 57 {"conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} + inet/filter/limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-49 + inet6/filter/limit-48 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-49 + inet/filter/logdrop-49 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-49 -m limit --limit 1/second -j LOG + inet/filter/logdrop-49 -j DROP + inet6/filter/logdrop-49 -j DROP + inet/filter/limit-48 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-48 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 56 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-49 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-49 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-49 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-49 + inet/filter/limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-50 + inet6/filter/limit-49 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-50 + inet/filter/logdrop-50 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-50 -m limit --limit 1/second -j LOG + inet/filter/logdrop-50 -j DROP + inet6/filter/logdrop-50 -j DROP + inet/filter/limit-49 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-49 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 57 {"conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-50 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-50 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-50 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-50 - inet/filter/limit-50 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-50 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-51 + inet6/filter/limit-50 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-51 + inet/filter/logdrop-51 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-51 -m limit --limit 1/second -j LOG + inet/filter/logdrop-51 -j DROP + inet6/filter/logdrop-51 -j DROP inet/filter/limit-50 -m limit --limit 1/second -j LOG inet6/filter/limit-50 -m limit --limit 1/second -j LOG - inet/filter/limit-50 -j ACCEPT - inet6/filter/limit-50 -j ACCEPT + inet/filter/limit-50 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-50 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 58 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 58 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-51 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-51 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-51 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-51 - inet/filter/limit-51 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-51 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-51 -m limit --limit 1/second -j LOG - inet6/filter/limit-51 -m limit --limit 1/second -j LOG + inet/filter/limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-52 + inet6/filter/limit-51 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-52 + inet/filter/logdrop-52 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-52 -m limit --limit 1/second -j LOG + inet/filter/logdrop-52 -j DROP + inet6/filter/logdrop-52 -j DROP + inet/filter/limit-51 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-51 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 59 {"conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 59 {"conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-52 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-52 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-52 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-52 - inet/filter/limit-52 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-52 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-52 -j ACCEPT - inet6/filter/limit-52 -j ACCEPT - -Filter 60 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 61 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} + inet/filter/limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-53 + inet6/filter/limit-52 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-53 + inet/filter/logdrop-53 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-53 -m limit --limit 1/second -j LOG + inet/filter/logdrop-53 -j DROP + inet6/filter/logdrop-53 -j DROP + inet/filter/limit-52 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-52 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 60 {"action":"pass","conn-limit":{"addr":"dest","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-53 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-53 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-53 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-53 + inet/filter/limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-54 + inet6/filter/limit-53 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-54 + inet/filter/logdrop-54 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-54 -m limit --limit 1/second -j LOG + inet/filter/logdrop-54 -j DROP + inet6/filter/logdrop-54 -j DROP + inet/filter/limit-53 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-53 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 61 {"conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-54 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-54 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-54 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-54 - inet/filter/limit-54 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-54 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-54 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-54 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-55 + inet6/filter/limit-54 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-55 + inet/filter/logdrop-55 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-55 -m limit --limit 1/second -j LOG + inet/filter/logdrop-55 -j DROP + inet6/filter/logdrop-55 -j DROP + inet/filter/limit-54 -j ACCEPT + inet6/filter/limit-54 -j ACCEPT -Filter 62 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} +Filter 62 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-55 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-55 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-55 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-55 - inet/filter/limit-55 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-55 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-55 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56 -Filter 63 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} +Filter 63 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-56 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-56 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-56 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-56 - inet/filter/limit-56 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-56 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-57 + inet6/filter/limit-56 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-57 + inet/filter/logdrop-57 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-57 -m limit --limit 1/second -j LOG + inet/filter/logdrop-57 -j DROP + inet6/filter/logdrop-57 -j DROP inet/filter/limit-56 -m limit --limit 1/second -j LOG inet6/filter/limit-56 -m limit --limit 1/second -j LOG - inet/filter/limit-56 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-56 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-56 -j ACCEPT + inet6/filter/limit-56 -j ACCEPT -Filter 64 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} +Filter 64 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-57 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-57 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-57 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-57 - inet/filter/limit-57 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-57 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-57 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-57 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-57 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-58 + inet6/filter/limit-57 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-58 + inet/filter/logdrop-58 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-58 -m limit --limit 1/second -j LOG + inet/filter/logdrop-58 -j DROP + inet6/filter/logdrop-58 -j DROP + inet/filter/limit-57 -m limit --limit 1/second -j LOG + inet6/filter/limit-57 -m limit --limit 1/second -j LOG -Filter 65 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} +Filter 65 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-58 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-58 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-58 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-58 - inet/filter/limit-58 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-58 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-58 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-58 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-59 + inet6/filter/limit-58 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-59 + inet/filter/logdrop-59 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-59 -m limit --limit 1/second -j LOG + inet/filter/logdrop-59 -j DROP + inet6/filter/logdrop-59 -j DROP + inet/filter/limit-58 -j ACCEPT + inet6/filter/limit-58 -j ACCEPT -Filter 66 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} +Filter 66 {"action":"pass","conn-limit":{"addr":"dest","name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-59 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-59 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-59 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-59 - inet/filter/limit-59 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-59 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-59 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60 -Filter 67 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} +Filter 67 {"conn-limit":{"log":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-60 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-60 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-60 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-60 - inet/filter/limit-60 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-60 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-60 -j ACCEPT - inet6/filter/limit-60 -j ACCEPT + inet/filter/limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-60 -m recent --name limit-60 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-60 -m recent --name limit-60 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 68 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} +Filter 68 {"action":"pass","conn-limit":{"log":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-61 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-61 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-61 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-61 + inet/filter/limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-61 -m recent --name limit-61 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-61 -m recent --name limit-61 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 69 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 69 {"conn-limit":{"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-62 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-62 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-62 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-62 - inet/filter/limit-62 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-62 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-62 -m limit --limit 1/second -j LOG inet6/filter/limit-62 -m limit --limit 1/second -j LOG - inet/filter/limit-62 -j ACCEPT - inet6/filter/limit-62 -j ACCEPT + inet/filter/limit-62 -m recent --name limit-62 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-62 -m recent --name limit-62 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 70 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 70 {"action":"pass","conn-limit":{"log":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-63 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-63 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-63 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-63 - inet/filter/limit-63 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-63 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-63 -m limit --limit 1/second -j LOG - inet6/filter/limit-63 -m limit --limit 1/second -j LOG + inet/filter/limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-63 -m recent --name limit-63 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-63 -m recent --name limit-63 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 71 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 71 {"conn-limit":{"log":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-64 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-64 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-64 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-64 - inet/filter/limit-64 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-64 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-64 -j ACCEPT - inet6/filter/limit-64 -j ACCEPT + inet/filter/limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-64 -m recent --name limit-64 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-64 -m recent --name limit-64 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 72 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 72 {"action":"pass","conn-limit":{"log":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-65 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-65 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-65 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-65 + inet/filter/limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-65 -m recent --name limit-65 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-65 -m recent --name limit-65 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 73 {"conn-limit":{"log":"none"},"out":"B"} +Filter 73 {"conn-limit":{"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-66 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-66 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-66 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-66 - inet/filter/limit-66 -m recent --name limit-66 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-66 -m recent --name limit-66 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-66 -m recent --name limit-66 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-66 -m recent --name limit-66 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-66 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-66 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 74 {"action":"pass","conn-limit":{"log":"none"},"out":"B"} +Filter 74 {"action":"pass","conn-limit":{"log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-67 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-67 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-67 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-67 - inet/filter/limit-67 -m recent --name limit-67 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-67 -m recent --name limit-67 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-67 -m recent --name limit-67 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-67 -m recent --name limit-67 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-67 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-67 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 75 {"conn-limit":{"log":"none"},"log":true,"out":"B"} +Filter 75 {"conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-68 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-68 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-68 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-68 - inet/filter/limit-68 -m recent --name limit-68 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-68 -m recent --name limit-68 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-68 -m limit --limit 1/second -j LOG inet6/filter/limit-68 -m limit --limit 1/second -j LOG - inet/filter/limit-68 -m recent --name limit-68 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-68 -m recent --name limit-68 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-68 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-68 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 76 {"action":"pass","conn-limit":{"log":"none"},"log":true,"out":"B"} +Filter 76 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-69 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-69 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-69 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-69 - inet/filter/limit-69 -m recent --name limit-69 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-69 -m recent --name limit-69 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-69 -m recent --name limit-69 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-69 -m recent --name limit-69 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-69 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-69 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 77 {"conn-limit":{"log":"none"},"log":"none","out":"B"} +Filter 77 {"conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-70 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-70 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-70 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-70 - inet/filter/limit-70 -m recent --name limit-70 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-70 -m recent --name limit-70 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-70 -m recent --name limit-70 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-70 -m recent --name limit-70 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-70 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-70 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 78 {"action":"pass","conn-limit":{"log":"none"},"log":"none","out":"B"} +Filter 78 {"action":"pass","conn-limit":{"log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-71 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-71 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-71 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-71 - inet/filter/limit-71 -m recent --name limit-71 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-71 -m recent --name limit-71 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-71 -m recent --name limit-71 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-71 -m recent --name limit-71 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-71 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-71 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 79 {"conn-limit":{"log":"none","name":"A"},"out":"B"} +Filter 79 {"conn-limit":{"log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-72 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-72 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-72 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-72 - inet/filter/limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-72 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-72 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-72 -j ACCEPT + inet6/filter/limit-72 -j ACCEPT -Filter 80 {"action":"pass","conn-limit":{"log":"none","name":"A"},"out":"B"} +Filter 80 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-73 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-73 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-73 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-73 - inet/filter/limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-73 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-73 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 81 {"conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} +Filter 81 {"conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-74 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-74 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-74 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-74 - inet/filter/limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-74 -m limit --limit 1/second -j LOG inet6/filter/limit-74 -m limit --limit 1/second -j LOG - inet/filter/limit-74 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-74 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-74 -j ACCEPT + inet6/filter/limit-74 -j ACCEPT -Filter 82 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} +Filter 82 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-75 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-75 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-75 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-75 - inet/filter/limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-75 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-75 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-75 -m limit --limit 1/second -j LOG + inet6/filter/limit-75 -m limit --limit 1/second -j LOG -Filter 83 {"conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} +Filter 83 {"conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-76 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-76 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-76 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-76 - inet/filter/limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-76 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-76 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-76 -j ACCEPT + inet6/filter/limit-76 -j ACCEPT -Filter 84 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} +Filter 84 {"action":"pass","conn-limit":{"log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-77 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-77 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-77 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-77 - inet/filter/limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-77 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-77 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 85 {"conn-limit":{"log":"none","name":"A","update":false},"out":"B"} +Filter 85 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-78 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-78 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-78 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-78 - inet/filter/limit-78 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-78 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-78 -j ACCEPT - inet6/filter/limit-78 -j ACCEPT + inet/filter/limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-78 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-78 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 86 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"out":"B"} +Filter 86 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-79 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-79 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-79 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-79 + inet/filter/limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-79 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-79 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 87 {"conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 87 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-80 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-80 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-80 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-80 - inet/filter/limit-80 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-80 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-80 -m limit --limit 1/second -j LOG inet6/filter/limit-80 -m limit --limit 1/second -j LOG - inet/filter/limit-80 -j ACCEPT - inet6/filter/limit-80 -j ACCEPT + inet/filter/limit-80 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-80 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 88 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 88 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-81 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-81 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-81 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-81 - inet/filter/limit-81 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-81 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-81 -m limit --limit 1/second -j LOG - inet6/filter/limit-81 -m limit --limit 1/second -j LOG + inet/filter/limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-81 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-81 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 89 {"conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 89 {"conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-82 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-82 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-82 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-82 - inet/filter/limit-82 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-82 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-82 -j ACCEPT - inet6/filter/limit-82 -j ACCEPT + inet/filter/limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-82 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-82 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 90 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 90 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A"},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-83 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-83 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-83 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-83 + inet/filter/limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-83 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-83 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 91 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} +Filter 91 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-84 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-84 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-84 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-84 - inet/filter/limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-84 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-84 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-84 -j ACCEPT + inet6/filter/limit-84 -j ACCEPT -Filter 92 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} +Filter 92 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-85 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-85 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-85 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-85 - inet/filter/limit-85 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-85 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-85 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-85 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 93 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} +Filter 93 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-86 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-86 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-86 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-86 - inet/filter/limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-86 -m limit --limit 1/second -j LOG inet6/filter/limit-86 -m limit --limit 1/second -j LOG - inet/filter/limit-86 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-86 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-86 -j ACCEPT + inet6/filter/limit-86 -j ACCEPT -Filter 94 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} +Filter 94 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-87 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-87 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-87 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-87 - inet/filter/limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-87 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-87 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-87 -m limit --limit 1/second -j LOG + inet6/filter/limit-87 -m limit --limit 1/second -j LOG -Filter 95 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} +Filter 95 {"conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-88 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-88 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-88 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-88 - inet/filter/limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-88 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-88 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-88 -j ACCEPT + inet6/filter/limit-88 -j ACCEPT -Filter 96 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} +Filter 96 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-89 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-89 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-89 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-89 - inet/filter/limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-89 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-89 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 97 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} +Filter 97 {"conn-limit":{"log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-90 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-90 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-90 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-90 - inet/filter/limit-90 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-90 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-90 -j ACCEPT - inet6/filter/limit-90 -j ACCEPT + inet/filter/limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-90 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-90 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-90 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 98 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} +Filter 98 {"action":"pass","conn-limit":{"log":false,"name":"C"},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-91 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-91 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-91 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-91 + inet/filter/limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-91 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-91 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-91 -m recent --name user:C --rsource --mask fe00:: --set -Filter 99 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 99 {"conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-92 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-92 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-92 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-92 - inet/filter/limit-92 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-92 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-92 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-92 -m limit --limit 1/second -j LOG inet6/filter/limit-92 -m limit --limit 1/second -j LOG - inet/filter/limit-92 -j ACCEPT - inet6/filter/limit-92 -j ACCEPT + inet/filter/limit-92 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-92 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 100 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 100 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-93 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-93 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-93 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-93 - inet/filter/limit-93 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-93 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-93 -m limit --limit 1/second -j LOG - inet6/filter/limit-93 -m limit --limit 1/second -j LOG + inet/filter/limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-93 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-93 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-93 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 101 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 101 {"conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-94 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-94 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-94 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-94 - inet/filter/limit-94 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-94 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-94 -j ACCEPT - inet6/filter/limit-94 -j ACCEPT + inet/filter/limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-94 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-94 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-94 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 102 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 102 {"action":"pass","conn-limit":{"log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-95 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-95 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-95 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-95 + inet/filter/limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-95 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-95 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-95 -m recent --name user:C --rsource --mask fe00:: --set -Filter 103 {"conn-limit":{"interval":5},"out":"B"} +Filter 103 {"conn-limit":{"log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-96 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-96 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-96 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-96 - inet/filter/limit-96 -m recent --name limit-96 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-37 - inet6/filter/limit-96 -m recent --name limit-96 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-37 - inet/filter/logdrop-37 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-37 -m limit --limit 1/second -j LOG - inet/filter/logdrop-37 -j DROP - inet6/filter/logdrop-37 -j DROP - inet/filter/limit-96 -m recent --name limit-96 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-96 -m recent --name limit-96 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-96 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-96 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-96 -j ACCEPT + inet6/filter/limit-96 -j ACCEPT -Filter 104 {"action":"pass","conn-limit":{"interval":5},"out":"B"} +Filter 104 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-97 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-97 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-97 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-97 - inet/filter/limit-97 -m recent --name limit-97 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-38 - inet6/filter/limit-97 -m recent --name limit-97 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-38 - inet/filter/logdrop-38 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-38 -m limit --limit 1/second -j LOG - inet/filter/logdrop-38 -j DROP - inet6/filter/logdrop-38 -j DROP - inet/filter/limit-97 -m recent --name limit-97 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-97 -m recent --name limit-97 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 105 {"conn-limit":{"interval":5},"log":true,"out":"B"} +Filter 105 {"conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-98 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-98 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-98 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-98 - inet/filter/limit-98 -m recent --name limit-98 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-39 - inet6/filter/limit-98 -m recent --name limit-98 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-39 - inet/filter/logdrop-39 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-39 -m limit --limit 1/second -j LOG - inet/filter/logdrop-39 -j DROP - inet6/filter/logdrop-39 -j DROP + inet/filter/limit-98 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-98 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-98 -m limit --limit 1/second -j LOG inet6/filter/limit-98 -m limit --limit 1/second -j LOG - inet/filter/limit-98 -m recent --name limit-98 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-98 -m recent --name limit-98 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-98 -j ACCEPT + inet6/filter/limit-98 -j ACCEPT -Filter 106 {"action":"pass","conn-limit":{"interval":5},"log":true,"out":"B"} +Filter 106 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-99 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-99 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-99 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-99 - inet/filter/limit-99 -m recent --name limit-99 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-40 - inet6/filter/limit-99 -m recent --name limit-99 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-40 - inet/filter/logdrop-40 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-40 -m limit --limit 1/second -j LOG - inet/filter/logdrop-40 -j DROP - inet6/filter/logdrop-40 -j DROP - inet/filter/limit-99 -m recent --name limit-99 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-99 -m recent --name limit-99 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-99 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-99 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-99 -m limit --limit 1/second -j LOG + inet6/filter/limit-99 -m limit --limit 1/second -j LOG -Filter 107 {"conn-limit":{"interval":5},"log":"none","out":"B"} +Filter 107 {"conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-100 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-100 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-100 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-100 - inet/filter/limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-41 - inet6/filter/limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-41 - inet/filter/logdrop-41 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-41 -m limit --limit 1/second -j LOG - inet/filter/logdrop-41 -j DROP - inet6/filter/logdrop-41 -j DROP - inet/filter/limit-100 -m recent --name limit-100 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-100 -m recent --name limit-100 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-100 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-100 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-100 -j ACCEPT + inet6/filter/limit-100 -j ACCEPT -Filter 108 {"action":"pass","conn-limit":{"interval":5},"log":"none","out":"B"} +Filter 108 {"action":"pass","conn-limit":{"log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-101 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-101 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-101 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-101 - inet/filter/limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-42 - inet6/filter/limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-42 - inet/filter/logdrop-42 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-42 -m limit --limit 1/second -j LOG - inet/filter/logdrop-42 -j DROP - inet6/filter/logdrop-42 -j DROP - inet/filter/limit-101 -m recent --name limit-101 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-101 -m recent --name limit-101 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 109 {"conn-limit":{"interval":5,"name":"A"},"out":"B"} +Filter 109 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-102 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-102 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-102 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-102 - inet/filter/limit-102 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-43 - inet6/filter/limit-102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-43 - inet/filter/logdrop-43 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-43 -m limit --limit 1/second -j LOG - inet/filter/logdrop-43 -j DROP - inet6/filter/logdrop-43 -j DROP - inet/filter/limit-102 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-102 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-102 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-102 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-102 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 110 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"out":"B"} +Filter 110 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-103 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-103 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-103 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-103 - inet/filter/limit-103 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-44 - inet6/filter/limit-103 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-44 - inet/filter/logdrop-44 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-44 -m limit --limit 1/second -j LOG - inet/filter/logdrop-44 -j DROP - inet6/filter/logdrop-44 -j DROP - inet/filter/limit-103 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-103 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-103 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-103 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-103 -m recent --name user:C --rdest --mask fe00:: --set -Filter 111 {"conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} +Filter 111 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-104 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-104 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-104 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-104 - inet/filter/limit-104 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-45 - inet6/filter/limit-104 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-45 - inet/filter/logdrop-45 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-45 -m limit --limit 1/second -j LOG - inet/filter/logdrop-45 -j DROP - inet6/filter/logdrop-45 -j DROP + inet/filter/limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-104 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-104 -m limit --limit 1/second -j LOG inet6/filter/limit-104 -m limit --limit 1/second -j LOG - inet/filter/limit-104 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-104 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-104 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-104 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 112 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} +Filter 112 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-105 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-105 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-105 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-105 - inet/filter/limit-105 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-46 - inet6/filter/limit-105 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-46 - inet/filter/logdrop-46 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-46 -m limit --limit 1/second -j LOG - inet/filter/logdrop-46 -j DROP - inet6/filter/logdrop-46 -j DROP - inet/filter/limit-105 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-105 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-105 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-105 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-105 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 113 {"conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} +Filter 113 {"conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-106 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-106 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-106 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-106 - inet/filter/limit-106 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-47 - inet6/filter/limit-106 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-47 - inet/filter/logdrop-47 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-47 -m limit --limit 1/second -j LOG - inet/filter/logdrop-47 -j DROP - inet6/filter/logdrop-47 -j DROP - inet/filter/limit-106 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-106 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-106 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-106 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-106 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 114 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} +Filter 114 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-107 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-107 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-107 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-107 - inet/filter/limit-107 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-48 - inet6/filter/limit-107 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-48 - inet/filter/logdrop-48 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-48 -m limit --limit 1/second -j LOG - inet/filter/logdrop-48 -j DROP - inet6/filter/logdrop-48 -j DROP - inet/filter/limit-107 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-107 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-107 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-107 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-107 -m recent --name user:C --rdest --mask fe00:: --set -Filter 115 {"conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} +Filter 115 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-108 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-108 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-108 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-108 - inet/filter/limit-108 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-49 - inet6/filter/limit-108 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-49 - inet/filter/logdrop-49 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-49 -m limit --limit 1/second -j LOG - inet/filter/logdrop-49 -j DROP - inet6/filter/logdrop-49 -j DROP + inet/filter/limit-108 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-108 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-108 -j ACCEPT inet6/filter/limit-108 -j ACCEPT -Filter 116 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} +Filter 116 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-50 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-50 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-50 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-50 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 117 {"conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 117 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-110 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-110 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-110 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-110 - inet/filter/limit-110 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-51 - inet6/filter/limit-110 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-51 - inet/filter/logdrop-51 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-51 -m limit --limit 1/second -j LOG - inet/filter/logdrop-51 -j DROP - inet6/filter/logdrop-51 -j DROP + inet/filter/limit-110 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-110 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-110 -m limit --limit 1/second -j LOG inet6/filter/limit-110 -m limit --limit 1/second -j LOG inet/filter/limit-110 -j ACCEPT inet6/filter/limit-110 -j ACCEPT -Filter 118 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 118 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-111 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-111 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-111 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-111 - inet/filter/limit-111 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-52 - inet6/filter/limit-111 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-52 - inet/filter/logdrop-52 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-52 -m limit --limit 1/second -j LOG - inet/filter/logdrop-52 -j DROP - inet6/filter/logdrop-52 -j DROP + inet/filter/limit-111 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-111 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-111 -m limit --limit 1/second -j LOG inet6/filter/limit-111 -m limit --limit 1/second -j LOG -Filter 119 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 119 {"conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-112 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-112 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-112 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-112 - inet/filter/limit-112 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-53 - inet6/filter/limit-112 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-53 - inet/filter/logdrop-53 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-53 -m limit --limit 1/second -j LOG - inet/filter/logdrop-53 -j DROP - inet6/filter/logdrop-53 -j DROP + inet/filter/limit-112 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-112 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-112 -j ACCEPT inet6/filter/limit-112 -j ACCEPT -Filter 120 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 120 {"action":"pass","conn-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-54 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-54 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-54 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-54 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 121 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} +Filter 121 {"conn-limit":{"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-114 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-114 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-114 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-114 - inet/filter/limit-114 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-55 - inet6/filter/limit-114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-55 - inet/filter/logdrop-55 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-55 -m limit --limit 1/second -j LOG - inet/filter/logdrop-55 -j DROP - inet6/filter/logdrop-55 -j DROP - inet/filter/limit-114 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-114 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-114 -m recent --name limit-114 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-114 -m recent --name limit-114 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 122 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} +Filter 122 {"action":"pass","conn-limit":{"log":"none"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-115 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-115 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-115 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-115 - inet/filter/limit-115 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-56 - inet6/filter/limit-115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-56 - inet/filter/logdrop-56 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-56 -m limit --limit 1/second -j LOG - inet/filter/logdrop-56 -j DROP - inet6/filter/logdrop-56 -j DROP - inet/filter/limit-115 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-115 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-115 -m recent --name limit-115 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-115 -m recent --name limit-115 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 123 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} +Filter 123 {"conn-limit":{"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-116 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-116 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-116 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-116 - inet/filter/limit-116 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-57 - inet6/filter/limit-116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-57 - inet/filter/logdrop-57 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-57 -m limit --limit 1/second -j LOG - inet/filter/logdrop-57 -j DROP - inet6/filter/logdrop-57 -j DROP + inet/filter/limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-116 -m limit --limit 1/second -j LOG inet6/filter/limit-116 -m limit --limit 1/second -j LOG - inet/filter/limit-116 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-116 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-116 -m recent --name limit-116 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-116 -m recent --name limit-116 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 124 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} +Filter 124 {"action":"pass","conn-limit":{"log":"none"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-117 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-117 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-117 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-117 - inet/filter/limit-117 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-58 - inet6/filter/limit-117 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-58 - inet/filter/logdrop-58 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-58 -m limit --limit 1/second -j LOG - inet/filter/logdrop-58 -j DROP - inet6/filter/logdrop-58 -j DROP - inet/filter/limit-117 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-117 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-117 -m recent --name limit-117 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-117 -m recent --name limit-117 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 125 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} +Filter 125 {"conn-limit":{"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-118 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-118 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-118 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-118 - inet/filter/limit-118 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-59 - inet6/filter/limit-118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-59 - inet/filter/logdrop-59 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-59 -m limit --limit 1/second -j LOG - inet/filter/logdrop-59 -j DROP - inet6/filter/logdrop-59 -j DROP - inet/filter/limit-118 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-118 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-118 -m recent --name limit-118 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-118 -m recent --name limit-118 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 126 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} +Filter 126 {"action":"pass","conn-limit":{"log":"none"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-119 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-119 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-119 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-119 - inet/filter/limit-119 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-60 - inet6/filter/limit-119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-60 - inet/filter/logdrop-60 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-60 -m limit --limit 1/second -j LOG - inet/filter/logdrop-60 -j DROP - inet6/filter/logdrop-60 -j DROP - inet/filter/limit-119 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-119 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-119 -m recent --name limit-119 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-119 -m recent --name limit-119 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 127 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} +Filter 127 {"conn-limit":{"log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-120 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-120 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-120 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-120 - inet/filter/limit-120 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-61 - inet6/filter/limit-120 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-61 - inet/filter/logdrop-61 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-61 -m limit --limit 1/second -j LOG - inet/filter/logdrop-61 -j DROP - inet6/filter/logdrop-61 -j DROP - inet/filter/limit-120 -j ACCEPT - inet6/filter/limit-120 -j ACCEPT + inet/filter/limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-120 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-120 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 128 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} +Filter 128 {"action":"pass","conn-limit":{"log":"none","name":"A"},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-62 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-62 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-62 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-62 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-121 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-121 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-121 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-121 + inet/filter/limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-121 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-121 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 129 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 129 {"conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-122 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-122 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-122 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-122 - inet/filter/limit-122 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-63 - inet6/filter/limit-122 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-63 - inet/filter/logdrop-63 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-63 -m limit --limit 1/second -j LOG - inet/filter/logdrop-63 -j DROP - inet6/filter/logdrop-63 -j DROP + inet/filter/limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-122 -m limit --limit 1/second -j LOG inet6/filter/limit-122 -m limit --limit 1/second -j LOG - inet/filter/limit-122 -j ACCEPT - inet6/filter/limit-122 -j ACCEPT + inet/filter/limit-122 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-122 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 130 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} +Filter 130 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-123 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-123 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-123 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-123 - inet/filter/limit-123 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-64 - inet6/filter/limit-123 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-64 - inet/filter/logdrop-64 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-64 -m limit --limit 1/second -j LOG - inet/filter/logdrop-64 -j DROP - inet6/filter/logdrop-64 -j DROP - inet/filter/limit-123 -m limit --limit 1/second -j LOG - inet6/filter/limit-123 -m limit --limit 1/second -j LOG + inet/filter/limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-123 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-123 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 131 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 131 {"conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-124 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-124 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-124 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-124 - inet/filter/limit-124 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-65 - inet6/filter/limit-124 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-65 - inet/filter/logdrop-65 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-65 -m limit --limit 1/second -j LOG - inet/filter/logdrop-65 -j DROP - inet6/filter/logdrop-65 -j DROP - inet/filter/limit-124 -j ACCEPT - inet6/filter/limit-124 -j ACCEPT + inet/filter/limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-124 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-124 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 132 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} +Filter 132 {"action":"pass","conn-limit":{"log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-66 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-66 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-66 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-66 + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-125 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-125 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-125 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-125 + inet/filter/limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-125 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-125 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 133 {"conn-limit":{"interval":5,"log":false},"out":"B"} +Filter 133 {"conn-limit":{"log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-126 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-126 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-126 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-126 - inet/filter/limit-126 -m recent --name limit-126 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-126 -m recent --name limit-126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-126 -m recent --name limit-126 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-126 -m recent --name limit-126 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-126 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-126 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-126 -j ACCEPT + inet6/filter/limit-126 -j ACCEPT -Filter 134 {"action":"pass","conn-limit":{"interval":5,"log":false},"out":"B"} +Filter 134 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-127 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-127 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-127 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-127 - inet/filter/limit-127 -m recent --name limit-127 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-127 -m recent --name limit-127 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-127 -m recent --name limit-127 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-127 -m recent --name limit-127 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 135 {"conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +Filter 135 {"conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-128 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-128 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-128 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-128 - inet/filter/limit-128 -m recent --name limit-128 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-128 -m recent --name limit-128 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-128 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-128 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-128 -m limit --limit 1/second -j LOG inet6/filter/limit-128 -m limit --limit 1/second -j LOG - inet/filter/limit-128 -m recent --name limit-128 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-128 -m recent --name limit-128 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-128 -j ACCEPT + inet6/filter/limit-128 -j ACCEPT -Filter 136 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +Filter 136 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-129 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-129 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-129 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-129 - inet/filter/limit-129 -m recent --name limit-129 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-129 -m recent --name limit-129 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-129 -m recent --name limit-129 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-129 -m recent --name limit-129 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-129 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-129 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-129 -m limit --limit 1/second -j LOG + inet6/filter/limit-129 -m limit --limit 1/second -j LOG -Filter 137 {"conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +Filter 137 {"conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-130 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-130 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-130 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-130 - inet/filter/limit-130 -m recent --name limit-130 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-130 -m recent --name limit-130 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-130 -m recent --name limit-130 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-130 -m recent --name limit-130 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-130 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-130 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-130 -j ACCEPT + inet6/filter/limit-130 -j ACCEPT -Filter 138 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +Filter 138 {"action":"pass","conn-limit":{"log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-131 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-131 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-131 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-131 - inet/filter/limit-131 -m recent --name limit-131 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-131 -m recent --name limit-131 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-131 -m recent --name limit-131 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-131 -m recent --name limit-131 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 139 {"conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +Filter 139 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-132 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-132 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-132 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-132 - inet/filter/limit-132 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-132 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-132 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-132 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-132 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 140 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +Filter 140 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-133 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-133 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-133 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-133 - inet/filter/limit-133 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-133 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-133 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-133 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-133 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 141 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 141 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-134 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-134 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-134 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-134 - inet/filter/limit-134 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-134 -m limit --limit 1/second -j LOG inet6/filter/limit-134 -m limit --limit 1/second -j LOG - inet/filter/limit-134 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-134 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-134 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-134 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 142 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 142 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-135 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-135 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-135 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-135 - inet/filter/limit-135 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-135 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-135 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-135 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-135 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 143 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 143 {"conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-136 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-136 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-136 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-136 - inet/filter/limit-136 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-136 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-136 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-136 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-136 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 144 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 144 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-137 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-137 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-137 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-137 - inet/filter/limit-137 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-137 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-137 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-137 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-137 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-137 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 145 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 145 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-138 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-138 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-138 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-138 - inet/filter/limit-138 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-138 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-138 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-138 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-138 -j ACCEPT inet6/filter/limit-138 -j ACCEPT -Filter 146 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 146 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 147 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 147 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-140 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-140 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-140 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-140 - inet/filter/limit-140 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-140 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-140 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-140 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-140 -m limit --limit 1/second -j LOG inet6/filter/limit-140 -m limit --limit 1/second -j LOG inet/filter/limit-140 -j ACCEPT inet6/filter/limit-140 -j ACCEPT -Filter 148 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 148 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-141 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-141 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-141 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-141 - inet/filter/limit-141 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-141 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-141 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-141 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-141 -m limit --limit 1/second -j LOG inet6/filter/limit-141 -m limit --limit 1/second -j LOG -Filter 149 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 149 {"conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-142 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-142 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-142 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-142 - inet/filter/limit-142 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-142 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-142 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-142 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-142 -j ACCEPT inet6/filter/limit-142 -j ACCEPT -Filter 150 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 150 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 151 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +Filter 151 {"conn-limit":{"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-144 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-144 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-144 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-144 - inet/filter/limit-144 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-144 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-144 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-144 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-144 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-144 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 152 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +Filter 152 {"action":"pass","conn-limit":{"log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-145 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-145 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-145 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-145 - inet/filter/limit-145 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-145 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-145 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-145 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-145 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-145 -m recent --name user:C --rsource --mask fe00:: --set -Filter 153 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 153 {"conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-146 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-146 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-146 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-146 - inet/filter/limit-146 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-146 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-146 -m limit --limit 1/second -j LOG inet6/filter/limit-146 -m limit --limit 1/second -j LOG - inet/filter/limit-146 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-146 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-146 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-146 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 154 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +Filter 154 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-147 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-147 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-147 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-147 - inet/filter/limit-147 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-147 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-147 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-147 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-147 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-147 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 155 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 155 {"conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-148 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-148 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-148 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-148 - inet/filter/limit-148 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-148 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-148 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-148 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-148 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-148 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 156 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +Filter 156 {"action":"pass","conn-limit":{"log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-149 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-149 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-149 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-149 - inet/filter/limit-149 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-149 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-149 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-149 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-149 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-149 -m recent --name user:C --rsource --mask fe00:: --set -Filter 157 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 157 {"conn-limit":{"log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-150 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-150 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-150 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-150 - inet/filter/limit-150 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-150 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-150 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-150 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-150 -j ACCEPT inet6/filter/limit-150 -j ACCEPT -Filter 158 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +Filter 158 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 159 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 159 {"conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-152 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-152 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-152 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-152 - inet/filter/limit-152 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-152 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-152 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-152 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-152 -m limit --limit 1/second -j LOG inet6/filter/limit-152 -m limit --limit 1/second -j LOG inet/filter/limit-152 -j ACCEPT inet6/filter/limit-152 -j ACCEPT -Filter 160 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +Filter 160 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-153 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-153 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-153 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-153 - inet/filter/limit-153 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-153 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-153 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-153 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-153 -m limit --limit 1/second -j LOG inet6/filter/limit-153 -m limit --limit 1/second -j LOG -Filter 161 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 161 {"conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-154 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-154 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-154 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-154 - inet/filter/limit-154 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-154 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-154 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-154 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-154 -j ACCEPT inet6/filter/limit-154 -j ACCEPT -Filter 162 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +Filter 162 {"action":"pass","conn-limit":{"log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 163 {"conn-limit":{"interval":5,"log":"none"},"out":"B"} +Filter 163 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-156 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-156 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-156 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-156 - inet/filter/limit-156 -m recent --name limit-156 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-156 -m recent --name limit-156 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-156 -m recent --name limit-156 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-156 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-156 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-156 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 164 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"out":"B"} +Filter 164 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-157 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-157 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-157 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-157 - inet/filter/limit-157 -m recent --name limit-157 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-157 -m recent --name limit-157 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-157 -m recent --name limit-157 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-157 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-157 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-157 -m recent --name user:C --rdest --mask fe00:: --set -Filter 165 {"conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +Filter 165 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-158 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-158 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-158 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-158 - inet/filter/limit-158 -m recent --name limit-158 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-158 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP inet/filter/limit-158 -m limit --limit 1/second -j LOG inet6/filter/limit-158 -m limit --limit 1/second -j LOG - inet/filter/limit-158 -m recent --name limit-158 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-158 -m recent --name limit-158 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-158 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-158 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 166 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +Filter 166 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-159 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-159 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-159 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-159 - inet/filter/limit-159 -m recent --name limit-159 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-159 -m recent --name limit-159 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-159 -m recent --name limit-159 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-159 -m recent --name limit-159 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-159 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-159 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-159 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 167 {"conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +Filter 167 {"conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-160 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-160 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-160 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-160 - inet/filter/limit-160 -m recent --name limit-160 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-160 -m recent --name limit-160 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-160 -m recent --name limit-160 --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-160 -m recent --name limit-160 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-160 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-160 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-160 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 168 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +Filter 168 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-161 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-161 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-161 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-161 - inet/filter/limit-161 -m recent --name limit-161 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-161 -m recent --name limit-161 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-161 -m recent --name limit-161 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-161 -m recent --name limit-161 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-161 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-161 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-161 -m recent --name user:C --rdest --mask fe00:: --set -Filter 169 {"conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +Filter 169 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-162 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-162 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-162 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-162 - inet/filter/limit-162 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-162 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-162 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-162 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-162 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-162 -j ACCEPT + inet6/filter/limit-162 -j ACCEPT -Filter 170 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +Filter 170 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-163 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-163 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-163 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-163 - inet/filter/limit-163 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-163 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-163 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 171 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 171 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-164 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-164 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-164 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-164 - inet/filter/limit-164 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-164 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-164 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/limit-164 -m limit --limit 1/second -j LOG inet6/filter/limit-164 -m limit --limit 1/second -j LOG - inet/filter/limit-164 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-164 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-164 -j ACCEPT + inet6/filter/limit-164 -j ACCEPT -Filter 172 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 172 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-165 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-165 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-165 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-165 - inet/filter/limit-165 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-165 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-165 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-165 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-165 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-165 -m limit --limit 1/second -j LOG + inet6/filter/limit-165 -m limit --limit 1/second -j LOG -Filter 173 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 173 {"conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-166 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-166 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-166 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-166 - inet/filter/limit-166 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-166 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-166 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-166 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-166 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-166 -j ACCEPT + inet6/filter/limit-166 -j ACCEPT -Filter 174 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 174 {"action":"pass","conn-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-167 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-167 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-167 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-167 - inet/filter/limit-167 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-167 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-167 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP -Filter 175 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 175 {"conn-limit":{"interval":5},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-168 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-168 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-168 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-168 - inet/filter/limit-168 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-168 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-168 -j ACCEPT - inet6/filter/limit-168 -j ACCEPT - -Filter 176 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 177 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} + inet/filter/limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-61 + inet6/filter/limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-61 + inet/filter/logdrop-61 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-61 -m limit --limit 1/second -j LOG + inet/filter/logdrop-61 -j DROP + inet6/filter/logdrop-61 -j DROP + inet/filter/limit-168 -m recent --name limit-168 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-168 -m recent --name limit-168 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 176 {"action":"pass","conn-limit":{"interval":5},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-169 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-169 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-169 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-169 + inet/filter/limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-62 + inet6/filter/limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-62 + inet/filter/logdrop-62 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-62 -m limit --limit 1/second -j LOG + inet/filter/logdrop-62 -j DROP + inet6/filter/logdrop-62 -j DROP + inet/filter/limit-169 -m recent --name limit-169 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-169 -m recent --name limit-169 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 177 {"conn-limit":{"interval":5},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-170 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-170 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-170 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-170 - inet/filter/limit-170 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-170 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-63 + inet6/filter/limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-63 + inet/filter/logdrop-63 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-63 -m limit --limit 1/second -j LOG + inet/filter/logdrop-63 -j DROP + inet6/filter/logdrop-63 -j DROP inet/filter/limit-170 -m limit --limit 1/second -j LOG inet6/filter/limit-170 -m limit --limit 1/second -j LOG - inet/filter/limit-170 -j ACCEPT - inet6/filter/limit-170 -j ACCEPT + inet/filter/limit-170 -m recent --name limit-170 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-170 -m recent --name limit-170 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 178 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 178 {"action":"pass","conn-limit":{"interval":5},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-171 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-171 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-171 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-171 - inet/filter/limit-171 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-171 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-171 -m limit --limit 1/second -j LOG - inet6/filter/limit-171 -m limit --limit 1/second -j LOG + inet/filter/limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-64 + inet6/filter/limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-64 + inet/filter/logdrop-64 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-64 -m limit --limit 1/second -j LOG + inet/filter/logdrop-64 -j DROP + inet6/filter/logdrop-64 -j DROP + inet/filter/limit-171 -m recent --name limit-171 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-171 -m recent --name limit-171 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 179 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 179 {"conn-limit":{"interval":5},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-172 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-172 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-172 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-172 - inet/filter/limit-172 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-172 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-172 -j ACCEPT - inet6/filter/limit-172 -j ACCEPT - -Filter 180 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - -Filter 181 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} + inet/filter/limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-65 + inet6/filter/limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-65 + inet/filter/logdrop-65 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-65 -m limit --limit 1/second -j LOG + inet/filter/logdrop-65 -j DROP + inet6/filter/logdrop-65 -j DROP + inet/filter/limit-172 -m recent --name limit-172 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-172 -m recent --name limit-172 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 180 {"action":"pass","conn-limit":{"interval":5},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-173 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-173 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-173 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-173 + inet/filter/limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-66 + inet6/filter/limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-66 + inet/filter/logdrop-66 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-66 -m limit --limit 1/second -j LOG + inet/filter/logdrop-66 -j DROP + inet6/filter/logdrop-66 -j DROP + inet/filter/limit-173 -m recent --name limit-173 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-173 -m recent --name limit-173 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 181 {"conn-limit":{"interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-174 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-174 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-174 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-174 - inet/filter/limit-174 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-174 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-174 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-67 + inet6/filter/limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-67 + inet/filter/logdrop-67 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-67 -m limit --limit 1/second -j LOG + inet/filter/logdrop-67 -j DROP + inet6/filter/logdrop-67 -j DROP + inet/filter/limit-174 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-174 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 182 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} +Filter 182 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-175 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-175 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-175 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-175 - inet/filter/limit-175 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-175 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-175 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-68 + inet6/filter/limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-68 + inet/filter/logdrop-68 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-68 -m limit --limit 1/second -j LOG + inet/filter/logdrop-68 -j DROP + inet6/filter/logdrop-68 -j DROP + inet/filter/limit-175 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-175 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 183 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 183 {"conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-176 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-176 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-176 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-176 - inet/filter/limit-176 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-69 + inet6/filter/limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-69 + inet/filter/logdrop-69 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-69 -m limit --limit 1/second -j LOG + inet/filter/logdrop-69 -j DROP + inet6/filter/logdrop-69 -j DROP inet/filter/limit-176 -m limit --limit 1/second -j LOG inet6/filter/limit-176 -m limit --limit 1/second -j LOG - inet/filter/limit-176 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-176 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-176 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-176 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 184 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +Filter 184 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-177 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-177 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-177 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-177 - inet/filter/limit-177 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-177 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-177 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/filter/limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-70 + inet6/filter/limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-70 + inet/filter/logdrop-70 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-70 -m limit --limit 1/second -j LOG + inet/filter/logdrop-70 -j DROP + inet6/filter/logdrop-70 -j DROP + inet/filter/limit-177 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-177 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 185 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 185 {"conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-178 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-178 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-178 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-178 - inet/filter/limit-178 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-178 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT - inet6/filter/limit-178 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/filter/limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-71 + inet6/filter/limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-71 + inet/filter/logdrop-71 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-71 -m limit --limit 1/second -j LOG + inet/filter/logdrop-71 -j DROP + inet6/filter/logdrop-71 -j DROP + inet/filter/limit-178 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-178 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 186 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +Filter 186 {"action":"pass","conn-limit":{"interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-179 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-179 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-179 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-179 - inet/filter/limit-179 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP - inet/filter/limit-179 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-179 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-72 + inet6/filter/limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-72 + inet/filter/logdrop-72 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-72 -m limit --limit 1/second -j LOG + inet/filter/logdrop-72 -j DROP + inet6/filter/logdrop-72 -j DROP + inet/filter/limit-179 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-179 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 187 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 187 {"conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-180 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-180 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-180 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-180 - inet/filter/limit-180 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-180 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-180 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-73 + inet6/filter/limit-180 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-73 + inet/filter/logdrop-73 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-73 -m limit --limit 1/second -j LOG + inet/filter/logdrop-73 -j DROP + inet6/filter/logdrop-73 -j DROP inet/filter/limit-180 -j ACCEPT inet6/filter/limit-180 -j ACCEPT -Filter 188 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +Filter 188 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74 -Filter 189 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 189 {"conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-182 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-182 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-182 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-182 - inet/filter/limit-182 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-182 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-182 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-75 + inet6/filter/limit-182 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-75 + inet/filter/logdrop-75 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-75 -m limit --limit 1/second -j LOG + inet/filter/logdrop-75 -j DROP + inet6/filter/logdrop-75 -j DROP inet/filter/limit-182 -m limit --limit 1/second -j LOG inet6/filter/limit-182 -m limit --limit 1/second -j LOG inet/filter/limit-182 -j ACCEPT inet6/filter/limit-182 -j ACCEPT -Filter 190 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +Filter 190 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-183 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-183 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-183 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-183 - inet/filter/limit-183 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-183 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-183 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-76 + inet6/filter/limit-183 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-76 + inet/filter/logdrop-76 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-76 -m limit --limit 1/second -j LOG + inet/filter/logdrop-76 -j DROP + inet6/filter/logdrop-76 -j DROP inet/filter/limit-183 -m limit --limit 1/second -j LOG inet6/filter/limit-183 -m limit --limit 1/second -j LOG -Filter 191 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 191 {"conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-184 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-184 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-184 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-184 - inet/filter/limit-184 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/limit-184 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-184 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-77 + inet6/filter/limit-184 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-77 + inet/filter/logdrop-77 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-77 -m limit --limit 1/second -j LOG + inet/filter/logdrop-77 -j DROP + inet6/filter/logdrop-77 -j DROP inet/filter/limit-184 -j ACCEPT inet6/filter/limit-184 -j ACCEPT -Filter 192 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +Filter 192 {"action":"pass","conn-limit":{"interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78 -Filter 193 {"conn-limit":150,"out":"B"} +Filter 193 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-186 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-186 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-186 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-186 - inet/filter/limit-186 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-186 -j ACCEPT - inet6/filter/limit-186 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-186 -j ACCEPT - inet/filter/limit-186 -m limit --limit 1/second -j LOG - inet6/filter/limit-186 -m limit --limit 1/second -j LOG - inet/filter/limit-186 -j DROP - inet6/filter/limit-186 -j DROP + inet/filter/limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-79 + inet6/filter/limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-79 + inet/filter/logdrop-79 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-79 -m limit --limit 1/second -j LOG + inet/filter/logdrop-79 -j DROP + inet6/filter/logdrop-79 -j DROP + inet/filter/limit-186 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-186 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 194 {"action":"pass","conn-limit":150,"out":"B"} +Filter 194 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-187 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-187 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-187 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-187 - inet/filter/limit-187 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-187 -j RETURN - inet6/filter/limit-187 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-187 -j RETURN - inet/filter/limit-187 -m limit --limit 1/second -j LOG - inet6/filter/limit-187 -m limit --limit 1/second -j LOG - inet/filter/limit-187 -j DROP - inet6/filter/limit-187 -j DROP + inet/filter/limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-80 + inet6/filter/limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-80 + inet/filter/logdrop-80 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-80 -m limit --limit 1/second -j LOG + inet/filter/logdrop-80 -j DROP + inet6/filter/logdrop-80 -j DROP + inet/filter/limit-187 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-187 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 195 {"conn-limit":150,"log":true,"out":"B"} +Filter 195 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-188 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-188 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-188 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-188 - inet/filter/limit-188 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-188 -j logaccept-0 - inet6/filter/limit-188 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-188 -j logaccept-0 - inet/filter/logaccept-0 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG - inet/filter/logaccept-0 -j ACCEPT - inet6/filter/logaccept-0 -j ACCEPT + inet/filter/limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-81 + inet6/filter/limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-81 + inet/filter/logdrop-81 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-81 -m limit --limit 1/second -j LOG + inet/filter/logdrop-81 -j DROP + inet6/filter/logdrop-81 -j DROP inet/filter/limit-188 -m limit --limit 1/second -j LOG inet6/filter/limit-188 -m limit --limit 1/second -j LOG - inet/filter/limit-188 -j DROP - inet6/filter/limit-188 -j DROP + inet/filter/limit-188 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-188 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 196 {"conn-limit":150,"log":"none","out":"B"} +Filter 196 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-189 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-189 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-189 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-189 - inet/filter/limit-189 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-189 -j ACCEPT - inet6/filter/limit-189 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-189 -j ACCEPT - inet/filter/limit-189 -m limit --limit 1/second -j LOG - inet6/filter/limit-189 -m limit --limit 1/second -j LOG - inet/filter/limit-189 -j DROP - inet6/filter/limit-189 -j DROP + inet/filter/limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-82 + inet6/filter/limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-82 + inet/filter/logdrop-82 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-82 -m limit --limit 1/second -j LOG + inet/filter/logdrop-82 -j DROP + inet6/filter/logdrop-82 -j DROP + inet/filter/limit-189 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-189 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 197 {"conn-limit":{"count":150},"out":"B"} +Filter 197 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-190 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-190 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-190 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-190 - inet/filter/limit-190 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-190 -j ACCEPT - inet6/filter/limit-190 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-190 -j ACCEPT - inet/filter/limit-190 -m limit --limit 1/second -j LOG - inet6/filter/limit-190 -m limit --limit 1/second -j LOG - inet/filter/limit-190 -j DROP - inet6/filter/limit-190 -j DROP + inet/filter/limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-83 + inet6/filter/limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-83 + inet/filter/logdrop-83 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-83 -m limit --limit 1/second -j LOG + inet/filter/logdrop-83 -j DROP + inet6/filter/logdrop-83 -j DROP + inet/filter/limit-190 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-190 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT -Filter 198 {"action":"pass","conn-limit":{"count":150},"out":"B"} +Filter 198 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-191 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-191 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-191 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-191 - inet/filter/limit-191 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-191 -j RETURN - inet6/filter/limit-191 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-191 -j RETURN - inet/filter/limit-191 -m limit --limit 1/second -j LOG - inet6/filter/limit-191 -m limit --limit 1/second -j LOG - inet/filter/limit-191 -j DROP - inet6/filter/limit-191 -j DROP + inet/filter/limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-84 + inet6/filter/limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-84 + inet/filter/logdrop-84 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-84 -m limit --limit 1/second -j LOG + inet/filter/logdrop-84 -j DROP + inet6/filter/logdrop-84 -j DROP + inet/filter/limit-191 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-191 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 199 {"conn-limit":{"count":150},"log":true,"out":"B"} +Filter 199 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-192 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-192 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-192 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-192 - inet/filter/limit-192 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-192 -j logaccept-1 - inet6/filter/limit-192 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-192 -j logaccept-1 - inet/filter/logaccept-1 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-1 -m limit --limit 1/second -j LOG - inet/filter/logaccept-1 -j ACCEPT - inet6/filter/logaccept-1 -j ACCEPT - inet/filter/limit-192 -m limit --limit 1/second -j LOG - inet6/filter/limit-192 -m limit --limit 1/second -j LOG - inet/filter/limit-192 -j DROP - inet6/filter/limit-192 -j DROP - -Filter 200 {"conn-limit":{"count":150},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-193 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-193 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-193 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-193 - inet/filter/limit-193 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-193 -j ACCEPT - inet6/filter/limit-193 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-193 -j ACCEPT - inet/filter/limit-193 -m limit --limit 1/second -j LOG - inet6/filter/limit-193 -m limit --limit 1/second -j LOG - inet/filter/limit-193 -j DROP - inet6/filter/limit-193 -j DROP - -Filter 201 {"conn-limit":{"count":150,"log":false},"out":"B"} + inet/filter/limit-192 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-85 + inet6/filter/limit-192 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-85 + inet/filter/logdrop-85 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-85 -m limit --limit 1/second -j LOG + inet/filter/logdrop-85 -j DROP + inet6/filter/logdrop-85 -j DROP + inet/filter/limit-192 -j ACCEPT + inet6/filter/limit-192 -j ACCEPT + +Filter 200 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86 + +Filter 201 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-194 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-194 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-194 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-194 - inet/filter/limit-194 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-194 -j ACCEPT - inet6/filter/limit-194 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-194 -j ACCEPT - inet/filter/limit-194 -j DROP - inet6/filter/limit-194 -j DROP + inet/filter/limit-194 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-87 + inet6/filter/limit-194 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-87 + inet/filter/logdrop-87 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-87 -m limit --limit 1/second -j LOG + inet/filter/logdrop-87 -j DROP + inet6/filter/logdrop-87 -j DROP + inet/filter/limit-194 -m limit --limit 1/second -j LOG + inet6/filter/limit-194 -m limit --limit 1/second -j LOG + inet/filter/limit-194 -j ACCEPT + inet6/filter/limit-194 -j ACCEPT -Filter 202 {"action":"pass","conn-limit":{"count":150,"log":false},"out":"B"} +Filter 202 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-195 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-195 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-195 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-195 - inet/filter/limit-195 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-195 -j RETURN - inet6/filter/limit-195 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-195 -j RETURN - inet/filter/limit-195 -j DROP - inet6/filter/limit-195 -j DROP + inet/filter/limit-195 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-88 + inet6/filter/limit-195 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-88 + inet/filter/logdrop-88 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-88 -m limit --limit 1/second -j LOG + inet/filter/logdrop-88 -j DROP + inet6/filter/logdrop-88 -j DROP + inet/filter/limit-195 -m limit --limit 1/second -j LOG + inet6/filter/limit-195 -m limit --limit 1/second -j LOG -Filter 203 {"conn-limit":{"count":150,"log":false},"log":true,"out":"B"} +Filter 203 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-196 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-196 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-196 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-196 - inet/filter/limit-196 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-196 -j logaccept-2 - inet6/filter/limit-196 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-196 -j logaccept-2 - inet/filter/logaccept-2 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-2 -m limit --limit 1/second -j LOG - inet/filter/logaccept-2 -j ACCEPT - inet6/filter/logaccept-2 -j ACCEPT - inet/filter/limit-196 -j DROP - inet6/filter/limit-196 -j DROP + inet/filter/limit-196 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-89 + inet6/filter/limit-196 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-89 + inet/filter/logdrop-89 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-89 -m limit --limit 1/second -j LOG + inet/filter/logdrop-89 -j DROP + inet6/filter/logdrop-89 -j DROP + inet/filter/limit-196 -j ACCEPT + inet6/filter/limit-196 -j ACCEPT -Filter 204 {"conn-limit":{"count":150,"log":false},"log":"none","out":"B"} +Filter 204 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-197 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-197 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-197 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-197 - inet/filter/limit-197 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-197 -j ACCEPT - inet6/filter/limit-197 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-197 -j ACCEPT - inet/filter/limit-197 -j DROP - inet6/filter/limit-197 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90 -Filter 205 {"conn-limit":{"count":150,"log":"none"},"out":"B"} +Filter 205 {"conn-limit":{"interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-198 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-198 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-198 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-198 - inet/filter/limit-198 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-198 -j ACCEPT - inet6/filter/limit-198 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-198 -j ACCEPT - inet/filter/limit-198 -j DROP - inet6/filter/limit-198 -j DROP + inet/filter/limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-91 + inet6/filter/limit-198 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-91 + inet/filter/logdrop-91 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-91 -m limit --limit 1/second -j LOG + inet/filter/logdrop-91 -j DROP + inet6/filter/logdrop-91 -j DROP + inet/filter/limit-198 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-198 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 206 {"action":"pass","conn-limit":{"count":150,"log":"none"},"out":"B"} +Filter 206 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-199 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-199 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-199 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-199 - inet/filter/limit-199 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-199 -j RETURN - inet6/filter/limit-199 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-199 -j RETURN - inet/filter/limit-199 -j DROP - inet6/filter/limit-199 -j DROP + inet/filter/limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-92 + inet6/filter/limit-199 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-92 + inet/filter/logdrop-92 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-92 -m limit --limit 1/second -j LOG + inet/filter/logdrop-92 -j DROP + inet6/filter/logdrop-92 -j DROP + inet/filter/limit-199 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-199 -m recent --name user:C --rsource --mask fe00:: --set -Filter 207 {"conn-limit":{"count":150,"log":"none"},"log":true,"out":"B"} +Filter 207 {"conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-200 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-200 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-200 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-200 - inet/filter/limit-200 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-200 -j logaccept-3 - inet6/filter/limit-200 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-200 -j logaccept-3 - inet/filter/logaccept-3 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-3 -m limit --limit 1/second -j LOG - inet/filter/logaccept-3 -j ACCEPT - inet6/filter/logaccept-3 -j ACCEPT - inet/filter/limit-200 -j DROP - inet6/filter/limit-200 -j DROP + inet/filter/limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-93 + inet6/filter/limit-200 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-93 + inet/filter/logdrop-93 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-93 -m limit --limit 1/second -j LOG + inet/filter/logdrop-93 -j DROP + inet6/filter/logdrop-93 -j DROP + inet/filter/limit-200 -m limit --limit 1/second -j LOG + inet6/filter/limit-200 -m limit --limit 1/second -j LOG + inet/filter/limit-200 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-200 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 208 {"conn-limit":{"count":150,"log":"none"},"log":"none","out":"B"} +Filter 208 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-201 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-201 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-201 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-201 - inet/filter/limit-201 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-201 -j ACCEPT - inet6/filter/limit-201 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-201 -j ACCEPT - inet/filter/limit-201 -j DROP - inet6/filter/limit-201 -j DROP + inet/filter/limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-94 + inet6/filter/limit-201 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-94 + inet/filter/logdrop-94 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-94 -m limit --limit 1/second -j LOG + inet/filter/logdrop-94 -j DROP + inet6/filter/logdrop-94 -j DROP + inet/filter/limit-201 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-201 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 209 {"conn-limit":{"count":150,"interval":5},"out":"B"} +Filter 209 {"conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-202 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-202 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-202 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-202 - inet/filter/limit-202 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-202 -j ACCEPT - inet6/filter/limit-202 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-202 -j ACCEPT - inet/filter/limit-202 -m limit --limit 1/second -j LOG - inet6/filter/limit-202 -m limit --limit 1/second -j LOG - inet/filter/limit-202 -j DROP - inet6/filter/limit-202 -j DROP + inet/filter/limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-95 + inet6/filter/limit-202 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-95 + inet/filter/logdrop-95 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-95 -m limit --limit 1/second -j LOG + inet/filter/logdrop-95 -j DROP + inet6/filter/logdrop-95 -j DROP + inet/filter/limit-202 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-202 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT -Filter 210 {"action":"pass","conn-limit":{"count":150,"interval":5},"out":"B"} +Filter 210 {"action":"pass","conn-limit":{"interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-203 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-203 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-203 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-203 - inet/filter/limit-203 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-203 -j RETURN - inet6/filter/limit-203 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-203 -j RETURN - inet/filter/limit-203 -m limit --limit 1/second -j LOG - inet6/filter/limit-203 -m limit --limit 1/second -j LOG - inet/filter/limit-203 -j DROP - inet6/filter/limit-203 -j DROP + inet/filter/limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-96 + inet6/filter/limit-203 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-96 + inet/filter/logdrop-96 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-96 -m limit --limit 1/second -j LOG + inet/filter/logdrop-96 -j DROP + inet6/filter/logdrop-96 -j DROP + inet/filter/limit-203 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-203 -m recent --name user:C --rsource --mask fe00:: --set -Filter 211 {"conn-limit":{"count":150,"interval":5},"log":true,"out":"B"} +Filter 211 {"conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-204 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-204 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-204 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-204 - inet/filter/limit-204 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-204 -j logaccept-4 - inet6/filter/limit-204 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-204 -j logaccept-4 - inet/filter/logaccept-4 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-4 -m limit --limit 1/second -j LOG - inet/filter/logaccept-4 -j ACCEPT - inet6/filter/logaccept-4 -j ACCEPT - inet/filter/limit-204 -m limit --limit 1/second -j LOG - inet6/filter/limit-204 -m limit --limit 1/second -j LOG - inet/filter/limit-204 -j DROP - inet6/filter/limit-204 -j DROP - -Filter 212 {"conn-limit":{"count":150,"interval":5},"log":"none","out":"B"} -(filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-205 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-205 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-205 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-205 - inet/filter/limit-205 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-205 -j ACCEPT - inet6/filter/limit-205 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-205 -j ACCEPT - inet/filter/limit-205 -m limit --limit 1/second -j LOG - inet6/filter/limit-205 -m limit --limit 1/second -j LOG - inet/filter/limit-205 -j DROP - inet6/filter/limit-205 -j DROP - -Filter 213 {"conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} + inet/filter/limit-204 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-97 + inet6/filter/limit-204 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-97 + inet/filter/logdrop-97 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-97 -m limit --limit 1/second -j LOG + inet/filter/logdrop-97 -j DROP + inet6/filter/logdrop-97 -j DROP + inet/filter/limit-204 -j ACCEPT + inet6/filter/limit-204 -j ACCEPT + +Filter 212 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98 + +Filter 213 {"conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-206 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-206 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-206 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-206 - inet/filter/limit-206 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-206 -j ACCEPT - inet6/filter/limit-206 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-206 -j ACCEPT - inet/filter/limit-206 -j DROP - inet6/filter/limit-206 -j DROP + inet/filter/limit-206 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-99 + inet6/filter/limit-206 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-99 + inet/filter/logdrop-99 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-99 -m limit --limit 1/second -j LOG + inet/filter/logdrop-99 -j DROP + inet6/filter/logdrop-99 -j DROP + inet/filter/limit-206 -m limit --limit 1/second -j LOG + inet6/filter/limit-206 -m limit --limit 1/second -j LOG + inet/filter/limit-206 -j ACCEPT + inet6/filter/limit-206 -j ACCEPT -Filter 214 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} +Filter 214 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-207 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-207 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-207 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-207 - inet/filter/limit-207 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-207 -j RETURN - inet6/filter/limit-207 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-207 -j RETURN - inet/filter/limit-207 -j DROP - inet6/filter/limit-207 -j DROP + inet/filter/limit-207 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-100 + inet6/filter/limit-207 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-100 + inet/filter/logdrop-100 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-100 -m limit --limit 1/second -j LOG + inet/filter/logdrop-100 -j DROP + inet6/filter/logdrop-100 -j DROP + inet/filter/limit-207 -m limit --limit 1/second -j LOG + inet6/filter/limit-207 -m limit --limit 1/second -j LOG -Filter 215 {"conn-limit":{"count":150,"interval":5,"log":false},"log":true,"out":"B"} +Filter 215 {"conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-208 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-208 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-208 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-208 - inet/filter/limit-208 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-208 -j logaccept-5 - inet6/filter/limit-208 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-208 -j logaccept-5 - inet/filter/logaccept-5 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-5 -m limit --limit 1/second -j LOG - inet/filter/logaccept-5 -j ACCEPT - inet6/filter/logaccept-5 -j ACCEPT - inet/filter/limit-208 -j DROP - inet6/filter/limit-208 -j DROP + inet/filter/limit-208 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-101 + inet6/filter/limit-208 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-101 + inet/filter/logdrop-101 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-101 -m limit --limit 1/second -j LOG + inet/filter/logdrop-101 -j DROP + inet6/filter/logdrop-101 -j DROP + inet/filter/limit-208 -j ACCEPT + inet6/filter/limit-208 -j ACCEPT -Filter 216 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"none","out":"B"} +Filter 216 {"action":"pass","conn-limit":{"interval":5,"name":"C","update":false},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-209 - inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-209 - inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-209 - inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-209 - inet/filter/limit-209 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-209 -j ACCEPT - inet6/filter/limit-209 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-209 -j ACCEPT - inet/filter/limit-209 -j DROP - inet6/filter/limit-209 -j DROP + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102 -Filter 217 {"conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +Filter 217 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-210 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-210 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-210 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-210 - inet/filter/limit-210 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-210 -j ACCEPT - inet6/filter/limit-210 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-210 -j ACCEPT - inet/filter/limit-210 -j DROP - inet6/filter/limit-210 -j DROP + inet/filter/limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-103 + inet6/filter/limit-210 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-103 + inet/filter/logdrop-103 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-103 -m limit --limit 1/second -j LOG + inet/filter/logdrop-103 -j DROP + inet6/filter/logdrop-103 -j DROP + inet/filter/limit-210 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-210 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 218 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +Filter 218 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-211 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-211 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-211 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-211 - inet/filter/limit-211 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-211 -j RETURN - inet6/filter/limit-211 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-211 -j RETURN - inet/filter/limit-211 -j DROP - inet6/filter/limit-211 -j DROP + inet/filter/limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-104 + inet6/filter/limit-211 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-104 + inet/filter/logdrop-104 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-104 -m limit --limit 1/second -j LOG + inet/filter/logdrop-104 -j DROP + inet6/filter/logdrop-104 -j DROP + inet/filter/limit-211 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-211 -m recent --name user:C --rdest --mask fe00:: --set -Filter 219 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":true,"out":"B"} +Filter 219 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-212 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-212 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-212 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-212 - inet/filter/limit-212 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-212 -j logaccept-6 - inet6/filter/limit-212 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-212 -j logaccept-6 - inet/filter/logaccept-6 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-6 -m limit --limit 1/second -j LOG - inet/filter/logaccept-6 -j ACCEPT - inet6/filter/logaccept-6 -j ACCEPT - inet/filter/limit-212 -j DROP - inet6/filter/limit-212 -j DROP + inet/filter/limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-105 + inet6/filter/limit-212 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-105 + inet/filter/logdrop-105 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-105 -m limit --limit 1/second -j LOG + inet/filter/logdrop-105 -j DROP + inet6/filter/logdrop-105 -j DROP + inet/filter/limit-212 -m limit --limit 1/second -j LOG + inet6/filter/limit-212 -m limit --limit 1/second -j LOG + inet/filter/limit-212 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-212 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 220 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"none","out":"B"} +Filter 220 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":true,"out":"B"} (filter-limit) inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-213 inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-213 inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-213 inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-213 - inet/filter/limit-213 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-213 -j ACCEPT - inet6/filter/limit-213 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-213 -j ACCEPT - inet/filter/limit-213 -j DROP - inet6/filter/limit-213 -j DROP - -Filter 221 {"flow-limit":1} -(filter-limit) - inet/filter/FORWARD -j limit-214 - inet6/filter/FORWARD -j limit-214 - inet/filter/INPUT -j limit-214 - inet6/filter/INPUT -j limit-214 - inet/filter/OUTPUT -j limit-214 - inet6/filter/OUTPUT -j limit-214 - inet/filter/limit-214 -m recent --name limit-214 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-67 - inet6/filter/limit-214 -m recent --name limit-214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-67 - inet/filter/logdrop-67 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-67 -m limit --limit 1/second -j LOG - inet/filter/logdrop-67 -j DROP - inet6/filter/logdrop-67 -j DROP - inet/filter/limit-214 -m recent --name limit-214 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-214 -m recent --name limit-214 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-106 + inet6/filter/limit-213 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-106 + inet/filter/logdrop-106 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-106 -m limit --limit 1/second -j LOG + inet/filter/logdrop-106 -j DROP + inet6/filter/logdrop-106 -j DROP + inet/filter/limit-213 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-213 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 222 {"action":"pass","flow-limit":1} +Filter 221 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-215 - inet6/filter/FORWARD -j limit-215 - inet/filter/INPUT -j limit-215 - inet6/filter/INPUT -j limit-215 - inet/filter/OUTPUT -j limit-215 - inet6/filter/OUTPUT -j limit-215 - inet/filter/limit-215 -m recent --name limit-215 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-68 - inet6/filter/limit-215 -m recent --name limit-215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-68 - inet/filter/logdrop-68 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-68 -m limit --limit 1/second -j LOG - inet/filter/logdrop-68 -j DROP - inet6/filter/logdrop-68 -j DROP - inet/filter/limit-215 -m recent --name limit-215 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-215 -m recent --name limit-215 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 223 {"flow-limit":1,"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-216 - inet6/filter/FORWARD -j limit-216 - inet/filter/INPUT -j limit-216 - inet6/filter/INPUT -j limit-216 - inet/filter/OUTPUT -j limit-216 - inet6/filter/OUTPUT -j limit-216 - inet/filter/limit-216 -m recent --name limit-216 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-69 - inet6/filter/limit-216 -m recent --name limit-216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-69 - inet/filter/logdrop-69 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-69 -m limit --limit 1/second -j LOG - inet/filter/logdrop-69 -j DROP - inet6/filter/logdrop-69 -j DROP - inet/filter/limit-216 -m recent --name limit-216 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-216 -m recent --name limit-216 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-0 - inet6/filter/FORWARD -j logaccept-final-0 - inet/filter/INPUT -j logaccept-final-0 - inet6/filter/INPUT -j logaccept-final-0 - inet/filter/OUTPUT -j logaccept-final-0 - inet6/filter/OUTPUT -j logaccept-final-0 - inet/filter/logaccept-final-0 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-0 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-0 -j ACCEPT - inet6/filter/logaccept-final-0 -j ACCEPT + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-214 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-214 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-214 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-214 + inet/filter/limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-107 + inet6/filter/limit-214 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-107 + inet/filter/logdrop-107 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-107 -m limit --limit 1/second -j LOG + inet/filter/logdrop-107 -j DROP + inet6/filter/logdrop-107 -j DROP + inet/filter/limit-214 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-214 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT -Filter 224 {"action":"pass","flow-limit":1,"log":true} +Filter 222 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none","out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-217 - inet6/filter/FORWARD -j limit-217 - inet/filter/INPUT -j limit-217 - inet6/filter/INPUT -j limit-217 - inet/filter/OUTPUT -j limit-217 - inet6/filter/OUTPUT -j limit-217 - inet/filter/limit-217 -m recent --name limit-217 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-70 - inet6/filter/limit-217 -m recent --name limit-217 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-70 - inet/filter/logdrop-70 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-70 -m limit --limit 1/second -j LOG - inet/filter/logdrop-70 -j DROP - inet6/filter/logdrop-70 -j DROP - inet/filter/limit-217 -m recent --name limit-217 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-217 -m recent --name limit-217 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 225 {"flow-limit":1,"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-218 - inet6/filter/FORWARD -j limit-218 - inet/filter/INPUT -j limit-218 - inet6/filter/INPUT -j limit-218 - inet/filter/OUTPUT -j limit-218 - inet6/filter/OUTPUT -j limit-218 - inet/filter/limit-218 -m recent --name limit-218 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-71 - inet6/filter/limit-218 -m recent --name limit-218 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-71 - inet/filter/logdrop-71 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-71 -m limit --limit 1/second -j LOG - inet/filter/logdrop-71 -j DROP - inet6/filter/logdrop-71 -j DROP - inet/filter/limit-218 -m recent --name limit-218 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-218 -m recent --name limit-218 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-215 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-215 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-215 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-215 + inet/filter/limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-108 + inet6/filter/limit-215 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-108 + inet/filter/logdrop-108 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-108 -m limit --limit 1/second -j LOG + inet/filter/logdrop-108 -j DROP + inet6/filter/logdrop-108 -j DROP + inet/filter/limit-215 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-215 -m recent --name user:C --rdest --mask fe00:: --set -Filter 226 {"action":"pass","flow-limit":1,"log":"none"} +Filter 223 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} (filter-limit) - inet/filter/FORWARD -j limit-219 - inet6/filter/FORWARD -j limit-219 - inet/filter/INPUT -j limit-219 - inet6/filter/INPUT -j limit-219 - inet/filter/OUTPUT -j limit-219 - inet6/filter/OUTPUT -j limit-219 - inet/filter/limit-219 -m recent --name limit-219 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-72 - inet6/filter/limit-219 -m recent --name limit-219 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-72 - inet/filter/logdrop-72 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-72 -m limit --limit 1/second -j LOG - inet/filter/logdrop-72 -j DROP - inet6/filter/logdrop-72 -j DROP - inet/filter/limit-219 -m recent --name limit-219 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-219 -m recent --name limit-219 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 227 {"flow-limit":{}} -(filter-limit) - inet/filter/FORWARD -j limit-220 - inet6/filter/FORWARD -j limit-220 - inet/filter/INPUT -j limit-220 - inet6/filter/INPUT -j limit-220 - inet/filter/OUTPUT -j limit-220 - inet6/filter/OUTPUT -j limit-220 - inet/filter/limit-220 -m recent --name limit-220 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-73 - inet6/filter/limit-220 -m recent --name limit-220 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-73 - inet/filter/logdrop-73 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-73 -m limit --limit 1/second -j LOG - inet/filter/logdrop-73 -j DROP - inet6/filter/logdrop-73 -j DROP - inet/filter/limit-220 -m recent --name limit-220 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-220 -m recent --name limit-220 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-216 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-216 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-216 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-216 + inet/filter/limit-216 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-109 + inet6/filter/limit-216 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-109 + inet/filter/logdrop-109 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-109 -m limit --limit 1/second -j LOG + inet/filter/logdrop-109 -j DROP + inet6/filter/logdrop-109 -j DROP + inet/filter/limit-216 -j ACCEPT + inet6/filter/limit-216 -j ACCEPT + +Filter 224 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110 + +Filter 225 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-218 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-218 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-218 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-218 + inet/filter/limit-218 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-111 + inet6/filter/limit-218 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-111 + inet/filter/logdrop-111 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-111 -m limit --limit 1/second -j LOG + inet/filter/logdrop-111 -j DROP + inet6/filter/logdrop-111 -j DROP + inet/filter/limit-218 -m limit --limit 1/second -j LOG + inet6/filter/limit-218 -m limit --limit 1/second -j LOG + inet/filter/limit-218 -j ACCEPT + inet6/filter/limit-218 -j ACCEPT + +Filter 226 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-219 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-219 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-219 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-219 + inet/filter/limit-219 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-112 + inet6/filter/limit-219 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-112 + inet/filter/logdrop-112 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-112 -m limit --limit 1/second -j LOG + inet/filter/logdrop-112 -j DROP + inet6/filter/logdrop-112 -j DROP + inet/filter/limit-219 -m limit --limit 1/second -j LOG + inet6/filter/limit-219 -m limit --limit 1/second -j LOG + +Filter 227 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-220 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-220 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-220 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-220 + inet/filter/limit-220 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-113 + inet6/filter/limit-220 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-113 + inet/filter/logdrop-113 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-113 -m limit --limit 1/second -j LOG + inet/filter/logdrop-113 -j DROP + inet6/filter/logdrop-113 -j DROP + inet/filter/limit-220 -j ACCEPT + inet6/filter/limit-220 -j ACCEPT + +Filter 228 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114 + +Filter 229 {"conn-limit":{"interval":5,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-222 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-222 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-222 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-222 + inet/filter/limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 230 {"action":"pass","conn-limit":{"interval":5,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-223 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-223 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-223 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-223 + inet/filter/limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 231 {"conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-224 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-224 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-224 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-224 + inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-224 -m limit --limit 1/second -j LOG + inet6/filter/limit-224 -m limit --limit 1/second -j LOG + inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 232 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-225 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-225 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-225 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-225 + inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 233 {"conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-226 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-226 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-226 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-226 + inet/filter/limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-226 -m recent --name limit-226 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-226 -m recent --name limit-226 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 234 {"action":"pass","conn-limit":{"interval":5,"log":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-227 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-227 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-227 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-227 + inet/filter/limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-227 -m recent --name limit-227 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-227 -m recent --name limit-227 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 235 {"conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-228 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-228 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-228 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-228 + inet/filter/limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 236 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-229 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-229 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-229 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-229 + inet/filter/limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 237 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-230 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-230 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-230 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-230 + inet/filter/limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-230 -m limit --limit 1/second -j LOG + inet6/filter/limit-230 -m limit --limit 1/second -j LOG + inet/filter/limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 238 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-231 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-231 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-231 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-231 + inet/filter/limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 239 {"conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-232 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-232 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-232 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-232 + inet/filter/limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 240 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-233 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-233 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-233 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-233 + inet/filter/limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 241 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-234 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-234 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-234 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-234 + inet/filter/limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-234 -j ACCEPT + inet6/filter/limit-234 -j ACCEPT + +Filter 242 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 243 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-236 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-236 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-236 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-236 + inet/filter/limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-236 -m limit --limit 1/second -j LOG + inet6/filter/limit-236 -m limit --limit 1/second -j LOG + inet/filter/limit-236 -j ACCEPT + inet6/filter/limit-236 -j ACCEPT + +Filter 244 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-237 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-237 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-237 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-237 + inet/filter/limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-237 -m limit --limit 1/second -j LOG + inet6/filter/limit-237 -m limit --limit 1/second -j LOG + +Filter 245 {"conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-238 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-238 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-238 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-238 + inet/filter/limit-238 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-238 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-238 -j ACCEPT + inet6/filter/limit-238 -j ACCEPT + +Filter 246 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 247 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-240 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-240 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-240 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-240 + inet/filter/limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 248 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-241 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-241 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-241 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-241 + inet/filter/limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 249 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-242 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-242 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-242 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-242 + inet/filter/limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-242 -m limit --limit 1/second -j LOG + inet6/filter/limit-242 -m limit --limit 1/second -j LOG + inet/filter/limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 250 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-243 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-243 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-243 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-243 + inet/filter/limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 251 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-244 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-244 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-244 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-244 + inet/filter/limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 252 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-245 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-245 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-245 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-245 + inet/filter/limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 253 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-246 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-246 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-246 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-246 + inet/filter/limit-246 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-246 -j ACCEPT + inet6/filter/limit-246 -j ACCEPT + +Filter 254 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 255 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-248 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-248 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-248 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-248 + inet/filter/limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-248 -m limit --limit 1/second -j LOG + inet6/filter/limit-248 -m limit --limit 1/second -j LOG + inet/filter/limit-248 -j ACCEPT + inet6/filter/limit-248 -j ACCEPT + +Filter 256 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-249 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-249 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-249 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-249 + inet/filter/limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-249 -m limit --limit 1/second -j LOG + inet6/filter/limit-249 -m limit --limit 1/second -j LOG + +Filter 257 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-250 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-250 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-250 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-250 + inet/filter/limit-250 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-250 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-250 -j ACCEPT + inet6/filter/limit-250 -j ACCEPT + +Filter 258 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 259 {"conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-252 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-252 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-252 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-252 + inet/filter/limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-252 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-252 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-252 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 260 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-253 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-253 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-253 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-253 + inet/filter/limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-253 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-253 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-253 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 261 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-254 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-254 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-254 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-254 + inet/filter/limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-254 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-254 -m limit --limit 1/second -j LOG + inet6/filter/limit-254 -m limit --limit 1/second -j LOG + inet/filter/limit-254 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-254 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 262 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-255 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-255 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-255 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-255 + inet/filter/limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-255 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-255 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-255 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 263 {"conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-256 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-256 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-256 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-256 + inet/filter/limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-256 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-256 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-256 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 264 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-257 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-257 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-257 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-257 + inet/filter/limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-257 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-257 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-257 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 265 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-258 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-258 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-258 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-258 + inet/filter/limit-258 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-258 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-258 -j ACCEPT + inet6/filter/limit-258 -j ACCEPT + +Filter 266 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 267 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-260 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-260 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-260 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-260 + inet/filter/limit-260 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-260 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-260 -m limit --limit 1/second -j LOG + inet6/filter/limit-260 -m limit --limit 1/second -j LOG + inet/filter/limit-260 -j ACCEPT + inet6/filter/limit-260 -j ACCEPT + +Filter 268 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-261 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-261 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-261 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-261 + inet/filter/limit-261 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-261 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-261 -m limit --limit 1/second -j LOG + inet6/filter/limit-261 -m limit --limit 1/second -j LOG + +Filter 269 {"conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-262 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-262 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-262 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-262 + inet/filter/limit-262 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-262 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-262 -j ACCEPT + inet6/filter/limit-262 -j ACCEPT + +Filter 270 {"action":"pass","conn-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 271 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-264 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-264 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-264 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-264 + inet/filter/limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-264 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-264 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-264 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 272 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-265 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-265 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-265 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-265 + inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-265 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-265 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-265 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 273 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-266 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-266 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-266 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-266 + inet/filter/limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-266 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-266 -m limit --limit 1/second -j LOG + inet6/filter/limit-266 -m limit --limit 1/second -j LOG + inet/filter/limit-266 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-266 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 274 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-267 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-267 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-267 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-267 + inet/filter/limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-267 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-267 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-267 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 275 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-268 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-268 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-268 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-268 + inet/filter/limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-268 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-268 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-268 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 276 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-269 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-269 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-269 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-269 + inet/filter/limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-269 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-269 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-269 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 277 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-270 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-270 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-270 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-270 + inet/filter/limit-270 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-270 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-270 -j ACCEPT + inet6/filter/limit-270 -j ACCEPT + +Filter 278 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 279 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-272 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-272 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-272 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-272 + inet/filter/limit-272 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-272 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-272 -m limit --limit 1/second -j LOG + inet6/filter/limit-272 -m limit --limit 1/second -j LOG + inet/filter/limit-272 -j ACCEPT + inet6/filter/limit-272 -j ACCEPT + +Filter 280 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-273 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-273 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-273 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-273 + inet/filter/limit-273 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-273 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-273 -m limit --limit 1/second -j LOG + inet6/filter/limit-273 -m limit --limit 1/second -j LOG + +Filter 281 {"conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-274 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-274 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-274 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-274 + inet/filter/limit-274 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-274 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-274 -j ACCEPT + inet6/filter/limit-274 -j ACCEPT + +Filter 282 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 283 {"conn-limit":{"interval":5,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-276 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-276 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-276 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-276 + inet/filter/limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-276 -m recent --name limit-276 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-276 -m recent --name limit-276 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 284 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-277 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-277 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-277 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-277 + inet/filter/limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-277 -m recent --name limit-277 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-277 -m recent --name limit-277 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 285 {"conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-278 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-278 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-278 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-278 + inet/filter/limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-278 -m limit --limit 1/second -j LOG + inet6/filter/limit-278 -m limit --limit 1/second -j LOG + inet/filter/limit-278 -m recent --name limit-278 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-278 -m recent --name limit-278 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 286 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-279 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-279 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-279 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-279 + inet/filter/limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-279 -m recent --name limit-279 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-279 -m recent --name limit-279 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 287 {"conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-280 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-280 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-280 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-280 + inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 288 {"action":"pass","conn-limit":{"interval":5,"log":"none"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-281 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-281 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-281 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-281 + inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 289 {"conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-282 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-282 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-282 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-282 + inet/filter/limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-282 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-282 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 290 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-283 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-283 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-283 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-283 + inet/filter/limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-283 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-283 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 291 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-284 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-284 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-284 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-284 + inet/filter/limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-284 -m limit --limit 1/second -j LOG + inet6/filter/limit-284 -m limit --limit 1/second -j LOG + inet/filter/limit-284 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-284 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 292 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-285 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-285 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-285 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-285 + inet/filter/limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-285 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-285 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 293 {"conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-286 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-286 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-286 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-286 + inet/filter/limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 294 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-287 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-287 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-287 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-287 + inet/filter/limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 295 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-288 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-288 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-288 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-288 + inet/filter/limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-288 -j ACCEPT + inet6/filter/limit-288 -j ACCEPT + +Filter 296 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 297 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-290 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-290 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-290 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-290 + inet/filter/limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-290 -m limit --limit 1/second -j LOG + inet6/filter/limit-290 -m limit --limit 1/second -j LOG + inet/filter/limit-290 -j ACCEPT + inet6/filter/limit-290 -j ACCEPT + +Filter 298 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-291 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-291 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-291 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-291 + inet/filter/limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-291 -m limit --limit 1/second -j LOG + inet6/filter/limit-291 -m limit --limit 1/second -j LOG + +Filter 299 {"conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-292 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-292 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-292 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-292 + inet/filter/limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-292 -j ACCEPT + inet6/filter/limit-292 -j ACCEPT + +Filter 300 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 301 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-294 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-294 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-294 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-294 + inet/filter/limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-294 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-294 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 302 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-295 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-295 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-295 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-295 + inet/filter/limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-295 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-295 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 303 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-296 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-296 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-296 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-296 + inet/filter/limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-296 -m limit --limit 1/second -j LOG + inet6/filter/limit-296 -m limit --limit 1/second -j LOG + inet/filter/limit-296 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-296 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 304 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-297 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-297 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-297 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-297 + inet/filter/limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-297 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-297 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 305 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-298 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-298 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-298 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-298 + inet/filter/limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + +Filter 306 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-299 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-299 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-299 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-299 + inet/filter/limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 307 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-300 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-300 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-300 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-300 + inet/filter/limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-300 -j ACCEPT + inet6/filter/limit-300 -j ACCEPT + +Filter 308 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 309 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-302 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-302 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-302 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-302 + inet/filter/limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-302 -m limit --limit 1/second -j LOG + inet6/filter/limit-302 -m limit --limit 1/second -j LOG + inet/filter/limit-302 -j ACCEPT + inet6/filter/limit-302 -j ACCEPT + +Filter 310 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-303 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-303 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-303 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-303 + inet/filter/limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-303 -m limit --limit 1/second -j LOG + inet6/filter/limit-303 -m limit --limit 1/second -j LOG + +Filter 311 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-304 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-304 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-304 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-304 + inet/filter/limit-304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-304 -j ACCEPT + inet6/filter/limit-304 -j ACCEPT + +Filter 312 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 313 {"conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-306 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-306 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-306 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-306 + inet/filter/limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-306 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-306 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-306 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 314 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-307 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-307 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-307 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-307 + inet/filter/limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-307 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-307 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-307 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 315 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-308 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-308 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-308 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-308 + inet/filter/limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-308 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-308 -m limit --limit 1/second -j LOG + inet6/filter/limit-308 -m limit --limit 1/second -j LOG + inet/filter/limit-308 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-308 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 316 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-309 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-309 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-309 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-309 + inet/filter/limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-309 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-309 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-309 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 317 {"conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-310 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-310 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-310 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-310 + inet/filter/limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-310 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-310 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-310 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + +Filter 318 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-311 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-311 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-311 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-311 + inet/filter/limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-311 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-311 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-311 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 319 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-312 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-312 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-312 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-312 + inet/filter/limit-312 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-312 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-312 -j ACCEPT + inet6/filter/limit-312 -j ACCEPT + +Filter 320 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 321 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-314 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-314 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-314 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-314 + inet/filter/limit-314 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-314 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-314 -m limit --limit 1/second -j LOG + inet6/filter/limit-314 -m limit --limit 1/second -j LOG + inet/filter/limit-314 -j ACCEPT + inet6/filter/limit-314 -j ACCEPT + +Filter 322 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-315 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-315 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-315 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-315 + inet/filter/limit-315 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-315 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-315 -m limit --limit 1/second -j LOG + inet6/filter/limit-315 -m limit --limit 1/second -j LOG + +Filter 323 {"conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-316 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-316 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-316 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-316 + inet/filter/limit-316 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-316 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-316 -j ACCEPT + inet6/filter/limit-316 -j ACCEPT + +Filter 324 {"action":"pass","conn-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 325 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-318 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-318 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-318 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-318 + inet/filter/limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-318 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-318 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-318 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 326 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-319 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-319 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-319 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-319 + inet/filter/limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-319 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-319 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-319 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 327 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-320 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-320 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-320 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-320 + inet/filter/limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-320 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-320 -m limit --limit 1/second -j LOG + inet6/filter/limit-320 -m limit --limit 1/second -j LOG + inet/filter/limit-320 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-320 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 328 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-321 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-321 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-321 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-321 + inet/filter/limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-321 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-321 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-321 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 329 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-322 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-322 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-322 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-322 + inet/filter/limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-322 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-322 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-322 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + +Filter 330 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-323 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-323 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-323 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-323 + inet/filter/limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-323 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-323 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-323 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 331 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-324 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-324 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-324 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-324 + inet/filter/limit-324 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-324 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-324 -j ACCEPT + inet6/filter/limit-324 -j ACCEPT + +Filter 332 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 333 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-326 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-326 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-326 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-326 + inet/filter/limit-326 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-326 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-326 -m limit --limit 1/second -j LOG + inet6/filter/limit-326 -m limit --limit 1/second -j LOG + inet/filter/limit-326 -j ACCEPT + inet6/filter/limit-326 -j ACCEPT + +Filter 334 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-327 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-327 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-327 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-327 + inet/filter/limit-327 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-327 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-327 -m limit --limit 1/second -j LOG + inet6/filter/limit-327 -m limit --limit 1/second -j LOG + +Filter 335 {"conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-328 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-328 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-328 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-328 + inet/filter/limit-328 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-328 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-328 -j ACCEPT + inet6/filter/limit-328 -j ACCEPT + +Filter 336 {"action":"pass","conn-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 337 {"conn-limit":150,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-330 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-330 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-330 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-330 + inet/filter/limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-330 -j ACCEPT + inet6/filter/limit-330 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-330 -j ACCEPT + inet/filter/limit-330 -m limit --limit 1/second -j LOG + inet6/filter/limit-330 -m limit --limit 1/second -j LOG + inet/filter/limit-330 -j DROP + inet6/filter/limit-330 -j DROP + +Filter 338 {"action":"pass","conn-limit":150,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-331 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-331 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-331 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-331 + inet/filter/limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-331 -j RETURN + inet6/filter/limit-331 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-331 -j RETURN + inet/filter/limit-331 -m limit --limit 1/second -j LOG + inet6/filter/limit-331 -m limit --limit 1/second -j LOG + inet/filter/limit-331 -j DROP + inet6/filter/limit-331 -j DROP + +Filter 339 {"conn-limit":150,"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-332 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-332 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-332 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-332 + inet/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-332 -j logaccept-0 + inet6/filter/limit-332 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-332 -j logaccept-0 + inet/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-0 -j ACCEPT + inet6/filter/logaccept-0 -j ACCEPT + inet/filter/limit-332 -m limit --limit 1/second -j LOG + inet6/filter/limit-332 -m limit --limit 1/second -j LOG + inet/filter/limit-332 -j DROP + inet6/filter/limit-332 -j DROP + +Filter 340 {"conn-limit":150,"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-333 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-333 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-333 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-333 + inet/filter/limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-333 -j ACCEPT + inet6/filter/limit-333 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-333 -j ACCEPT + inet/filter/limit-333 -m limit --limit 1/second -j LOG + inet6/filter/limit-333 -m limit --limit 1/second -j LOG + inet/filter/limit-333 -j DROP + inet6/filter/limit-333 -j DROP + +Filter 341 {"conn-limit":{"count":150},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-334 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-334 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-334 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-334 + inet/filter/limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-334 -j ACCEPT + inet6/filter/limit-334 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-334 -j ACCEPT + inet/filter/limit-334 -m limit --limit 1/second -j LOG + inet6/filter/limit-334 -m limit --limit 1/second -j LOG + inet/filter/limit-334 -j DROP + inet6/filter/limit-334 -j DROP + +Filter 342 {"action":"pass","conn-limit":{"count":150},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-335 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-335 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-335 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-335 + inet/filter/limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-335 -j RETURN + inet6/filter/limit-335 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-335 -j RETURN + inet/filter/limit-335 -m limit --limit 1/second -j LOG + inet6/filter/limit-335 -m limit --limit 1/second -j LOG + inet/filter/limit-335 -j DROP + inet6/filter/limit-335 -j DROP + +Filter 343 {"conn-limit":{"count":150},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-336 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-336 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-336 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-336 + inet/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-336 -j logaccept-1 + inet6/filter/limit-336 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-336 -j logaccept-1 + inet/filter/logaccept-1 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-1 -m limit --limit 1/second -j LOG + inet/filter/logaccept-1 -j ACCEPT + inet6/filter/logaccept-1 -j ACCEPT + inet/filter/limit-336 -m limit --limit 1/second -j LOG + inet6/filter/limit-336 -m limit --limit 1/second -j LOG + inet/filter/limit-336 -j DROP + inet6/filter/limit-336 -j DROP + +Filter 344 {"conn-limit":{"count":150},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-337 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-337 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-337 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-337 + inet/filter/limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-337 -j ACCEPT + inet6/filter/limit-337 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-337 -j ACCEPT + inet/filter/limit-337 -m limit --limit 1/second -j LOG + inet6/filter/limit-337 -m limit --limit 1/second -j LOG + inet/filter/limit-337 -j DROP + inet6/filter/limit-337 -j DROP + +Filter 345 {"conn-limit":{"count":150,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-338 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-338 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-338 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-338 + inet/filter/limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-338 -j ACCEPT + inet6/filter/limit-338 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-338 -j ACCEPT + inet/filter/limit-338 -j DROP + inet6/filter/limit-338 -j DROP + +Filter 346 {"action":"pass","conn-limit":{"count":150,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-339 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-339 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-339 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-339 + inet/filter/limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-339 -j RETURN + inet6/filter/limit-339 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-339 -j RETURN + inet/filter/limit-339 -j DROP + inet6/filter/limit-339 -j DROP + +Filter 347 {"conn-limit":{"count":150,"log":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-340 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-340 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-340 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-340 + inet/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-340 -j logaccept-2 + inet6/filter/limit-340 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-340 -j logaccept-2 + inet/filter/logaccept-2 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-2 -m limit --limit 1/second -j LOG + inet/filter/logaccept-2 -j ACCEPT + inet6/filter/logaccept-2 -j ACCEPT + inet/filter/limit-340 -j DROP + inet6/filter/limit-340 -j DROP + +Filter 348 {"conn-limit":{"count":150,"log":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-341 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-341 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-341 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-341 + inet/filter/limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-341 -j ACCEPT + inet6/filter/limit-341 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-341 -j ACCEPT + inet/filter/limit-341 -j DROP + inet6/filter/limit-341 -j DROP + +Filter 349 {"conn-limit":{"count":150,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-342 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-342 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-342 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-342 + inet/filter/limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-342 -j ACCEPT + inet6/filter/limit-342 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-342 -j ACCEPT + inet/filter/limit-342 -j DROP + inet6/filter/limit-342 -j DROP + +Filter 350 {"action":"pass","conn-limit":{"count":150,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-343 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-343 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-343 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-343 + inet/filter/limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-343 -j RETURN + inet6/filter/limit-343 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-343 -j RETURN + inet/filter/limit-343 -j DROP + inet6/filter/limit-343 -j DROP + +Filter 351 {"conn-limit":{"count":150,"log":"none"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-344 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-344 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-344 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-344 + inet/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-344 -j logaccept-3 + inet6/filter/limit-344 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-344 -j logaccept-3 + inet/filter/logaccept-3 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-3 -m limit --limit 1/second -j LOG + inet/filter/logaccept-3 -j ACCEPT + inet6/filter/logaccept-3 -j ACCEPT + inet/filter/limit-344 -j DROP + inet6/filter/limit-344 -j DROP + +Filter 352 {"conn-limit":{"count":150,"log":"none"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-345 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-345 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-345 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-345 + inet/filter/limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-345 -j ACCEPT + inet6/filter/limit-345 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-345 -j ACCEPT + inet/filter/limit-345 -j DROP + inet6/filter/limit-345 -j DROP + +Filter 353 {"conn-limit":{"count":150,"interval":5},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-346 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-346 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-346 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-346 + inet/filter/limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-346 -j ACCEPT + inet6/filter/limit-346 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-346 -j ACCEPT + inet/filter/limit-346 -m limit --limit 1/second -j LOG + inet6/filter/limit-346 -m limit --limit 1/second -j LOG + inet/filter/limit-346 -j DROP + inet6/filter/limit-346 -j DROP + +Filter 354 {"action":"pass","conn-limit":{"count":150,"interval":5},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-347 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-347 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-347 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-347 + inet/filter/limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-347 -j RETURN + inet6/filter/limit-347 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-347 -j RETURN + inet/filter/limit-347 -m limit --limit 1/second -j LOG + inet6/filter/limit-347 -m limit --limit 1/second -j LOG + inet/filter/limit-347 -j DROP + inet6/filter/limit-347 -j DROP + +Filter 355 {"conn-limit":{"count":150,"interval":5},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-348 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-348 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-348 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-348 + inet/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-348 -j logaccept-4 + inet6/filter/limit-348 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-348 -j logaccept-4 + inet/filter/logaccept-4 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-4 -m limit --limit 1/second -j LOG + inet/filter/logaccept-4 -j ACCEPT + inet6/filter/logaccept-4 -j ACCEPT + inet/filter/limit-348 -m limit --limit 1/second -j LOG + inet6/filter/limit-348 -m limit --limit 1/second -j LOG + inet/filter/limit-348 -j DROP + inet6/filter/limit-348 -j DROP + +Filter 356 {"conn-limit":{"count":150,"interval":5},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-349 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-349 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-349 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-349 + inet/filter/limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-349 -j ACCEPT + inet6/filter/limit-349 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-349 -j ACCEPT + inet/filter/limit-349 -m limit --limit 1/second -j LOG + inet6/filter/limit-349 -m limit --limit 1/second -j LOG + inet/filter/limit-349 -j DROP + inet6/filter/limit-349 -j DROP + +Filter 357 {"conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-350 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-350 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-350 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-350 + inet/filter/limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-350 -j ACCEPT + inet6/filter/limit-350 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-350 -j ACCEPT + inet/filter/limit-350 -j DROP + inet6/filter/limit-350 -j DROP + +Filter 358 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":false},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-351 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-351 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-351 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-351 + inet/filter/limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-351 -j RETURN + inet6/filter/limit-351 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-351 -j RETURN + inet/filter/limit-351 -j DROP + inet6/filter/limit-351 -j DROP + +Filter 359 {"conn-limit":{"count":150,"interval":5,"log":false},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-352 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-352 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-352 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-352 + inet/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-352 -j logaccept-5 + inet6/filter/limit-352 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-352 -j logaccept-5 + inet/filter/logaccept-5 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-5 -m limit --limit 1/second -j LOG + inet/filter/logaccept-5 -j ACCEPT + inet6/filter/logaccept-5 -j ACCEPT + inet/filter/limit-352 -j DROP + inet6/filter/limit-352 -j DROP + +Filter 360 {"conn-limit":{"count":150,"interval":5,"log":false},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-353 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-353 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-353 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-353 + inet/filter/limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-353 -j ACCEPT + inet6/filter/limit-353 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-353 -j ACCEPT + inet/filter/limit-353 -j DROP + inet6/filter/limit-353 -j DROP + +Filter 361 {"conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-354 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-354 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-354 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-354 + inet/filter/limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-354 -j ACCEPT + inet6/filter/limit-354 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-354 -j ACCEPT + inet/filter/limit-354 -j DROP + inet6/filter/limit-354 -j DROP + +Filter 362 {"action":"pass","conn-limit":{"count":150,"interval":5,"log":"none"},"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-355 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-355 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-355 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-355 + inet/filter/limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-355 -j RETURN + inet6/filter/limit-355 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-355 -j RETURN + inet/filter/limit-355 -j DROP + inet6/filter/limit-355 -j DROP + +Filter 363 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":true,"out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-356 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-356 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-356 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-356 + inet/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-356 -j logaccept-6 + inet6/filter/limit-356 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-356 -j logaccept-6 + inet/filter/logaccept-6 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-6 -m limit --limit 1/second -j LOG + inet/filter/logaccept-6 -j ACCEPT + inet6/filter/logaccept-6 -j ACCEPT + inet/filter/limit-356 -j DROP + inet6/filter/limit-356 -j DROP + +Filter 364 {"conn-limit":{"count":150,"interval":5,"log":"none"},"log":"none","out":"B"} +(filter-limit) + inet/filter/FORWARD -o eth1 -d 10.0.0.0/12 -j limit-357 + inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -j limit-357 + inet6/filter/FORWARD -o eth1 -d fc00::/7 -j limit-357 + inet6/filter/OUTPUT -o eth1 -d fc00::/7 -j limit-357 + inet/filter/limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-357 -j ACCEPT + inet6/filter/limit-357 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-357 -j ACCEPT + inet/filter/limit-357 -j DROP + inet6/filter/limit-357 -j DROP + +Filter 365 {"flow-limit":1} +(filter-limit) + inet/filter/FORWARD -j limit-358 + inet6/filter/FORWARD -j limit-358 + inet/filter/INPUT -j limit-358 + inet6/filter/INPUT -j limit-358 + inet/filter/OUTPUT -j limit-358 + inet6/filter/OUTPUT -j limit-358 + inet/filter/limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-115 + inet6/filter/limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-115 + inet/filter/logdrop-115 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-115 -m limit --limit 1/second -j LOG + inet/filter/logdrop-115 -j DROP + inet6/filter/logdrop-115 -j DROP + inet/filter/limit-358 -m recent --name limit-358 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-358 -m recent --name limit-358 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -2829,83 +4401,83 @@ Filter 227 {"flow-limit":{}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 228 {"action":"pass","flow-limit":{}} -(filter-limit) - inet/filter/FORWARD -j limit-221 - inet6/filter/FORWARD -j limit-221 - inet/filter/INPUT -j limit-221 - inet6/filter/INPUT -j limit-221 - inet/filter/OUTPUT -j limit-221 - inet6/filter/OUTPUT -j limit-221 - inet/filter/limit-221 -m recent --name limit-221 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-74 - inet6/filter/limit-221 -m recent --name limit-221 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-74 - inet/filter/logdrop-74 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-74 -m limit --limit 1/second -j LOG - inet/filter/logdrop-74 -j DROP - inet6/filter/logdrop-74 -j DROP - inet/filter/limit-221 -m recent --name limit-221 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-221 -m recent --name limit-221 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 229 {"flow-limit":{},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-222 - inet6/filter/FORWARD -j limit-222 - inet/filter/INPUT -j limit-222 - inet6/filter/INPUT -j limit-222 - inet/filter/OUTPUT -j limit-222 - inet6/filter/OUTPUT -j limit-222 - inet/filter/limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-75 - inet6/filter/limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-75 - inet/filter/logdrop-75 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-75 -m limit --limit 1/second -j LOG - inet/filter/logdrop-75 -j DROP - inet6/filter/logdrop-75 -j DROP - inet/filter/limit-222 -m recent --name limit-222 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-222 -m recent --name limit-222 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-1 - inet6/filter/FORWARD -j logaccept-final-1 - inet/filter/INPUT -j logaccept-final-1 - inet6/filter/INPUT -j logaccept-final-1 - inet/filter/OUTPUT -j logaccept-final-1 - inet6/filter/OUTPUT -j logaccept-final-1 - inet/filter/logaccept-final-1 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-1 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-1 -j ACCEPT - inet6/filter/logaccept-final-1 -j ACCEPT +Filter 366 {"action":"pass","flow-limit":1} +(filter-limit) + inet/filter/FORWARD -j limit-359 + inet6/filter/FORWARD -j limit-359 + inet/filter/INPUT -j limit-359 + inet6/filter/INPUT -j limit-359 + inet/filter/OUTPUT -j limit-359 + inet6/filter/OUTPUT -j limit-359 + inet/filter/limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-116 + inet6/filter/limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-116 + inet/filter/logdrop-116 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-116 -m limit --limit 1/second -j LOG + inet/filter/logdrop-116 -j DROP + inet6/filter/logdrop-116 -j DROP + inet/filter/limit-359 -m recent --name limit-359 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-359 -m recent --name limit-359 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 230 {"action":"pass","flow-limit":{},"log":true} +Filter 367 {"flow-limit":1,"log":true} (filter-limit) - inet/filter/FORWARD -j limit-223 - inet6/filter/FORWARD -j limit-223 - inet/filter/INPUT -j limit-223 - inet6/filter/INPUT -j limit-223 - inet/filter/OUTPUT -j limit-223 - inet6/filter/OUTPUT -j limit-223 - inet/filter/limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-76 - inet6/filter/limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-76 - inet/filter/logdrop-76 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-76 -m limit --limit 1/second -j LOG - inet/filter/logdrop-76 -j DROP - inet6/filter/logdrop-76 -j DROP - inet/filter/limit-223 -m recent --name limit-223 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-223 -m recent --name limit-223 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 231 {"flow-limit":{},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-224 - inet6/filter/FORWARD -j limit-224 - inet/filter/INPUT -j limit-224 - inet6/filter/INPUT -j limit-224 - inet/filter/OUTPUT -j limit-224 - inet6/filter/OUTPUT -j limit-224 - inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-77 - inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-77 - inet/filter/logdrop-77 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-77 -m limit --limit 1/second -j LOG - inet/filter/logdrop-77 -j DROP - inet6/filter/logdrop-77 -j DROP - inet/filter/limit-224 -m recent --name limit-224 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-224 -m recent --name limit-224 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-360 + inet6/filter/FORWARD -j limit-360 + inet/filter/INPUT -j limit-360 + inet6/filter/INPUT -j limit-360 + inet/filter/OUTPUT -j limit-360 + inet6/filter/OUTPUT -j limit-360 + inet/filter/limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-117 + inet6/filter/limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-117 + inet/filter/logdrop-117 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-117 -m limit --limit 1/second -j LOG + inet/filter/logdrop-117 -j DROP + inet6/filter/logdrop-117 -j DROP + inet/filter/limit-360 -m recent --name limit-360 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-360 -m recent --name limit-360 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-0 + inet6/filter/FORWARD -j logaccept-final-0 + inet/filter/INPUT -j logaccept-final-0 + inet6/filter/INPUT -j logaccept-final-0 + inet/filter/OUTPUT -j logaccept-final-0 + inet6/filter/OUTPUT -j logaccept-final-0 + inet/filter/logaccept-final-0 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-0 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-0 -j ACCEPT + inet6/filter/logaccept-final-0 -j ACCEPT + +Filter 368 {"action":"pass","flow-limit":1,"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-361 + inet6/filter/FORWARD -j limit-361 + inet/filter/INPUT -j limit-361 + inet6/filter/INPUT -j limit-361 + inet/filter/OUTPUT -j limit-361 + inet6/filter/OUTPUT -j limit-361 + inet/filter/limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-118 + inet6/filter/limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-118 + inet/filter/logdrop-118 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-118 -m limit --limit 1/second -j LOG + inet/filter/logdrop-118 -j DROP + inet6/filter/logdrop-118 -j DROP + inet/filter/limit-361 -m recent --name limit-361 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-361 -m recent --name limit-361 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 369 {"flow-limit":1,"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-362 + inet6/filter/FORWARD -j limit-362 + inet/filter/INPUT -j limit-362 + inet6/filter/INPUT -j limit-362 + inet/filter/OUTPUT -j limit-362 + inet6/filter/OUTPUT -j limit-362 + inet/filter/limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-119 + inet6/filter/limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-119 + inet/filter/logdrop-119 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-119 -m limit --limit 1/second -j LOG + inet/filter/logdrop-119 -j DROP + inet6/filter/logdrop-119 -j DROP + inet/filter/limit-362 -m recent --name limit-362 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-362 -m recent --name limit-362 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -2913,39 +4485,39 @@ Filter 231 {"flow-limit":{},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 232 {"action":"pass","flow-limit":{},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-225 - inet6/filter/FORWARD -j limit-225 - inet/filter/INPUT -j limit-225 - inet6/filter/INPUT -j limit-225 - inet/filter/OUTPUT -j limit-225 - inet6/filter/OUTPUT -j limit-225 - inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-78 - inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-78 - inet/filter/logdrop-78 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-78 -m limit --limit 1/second -j LOG - inet/filter/logdrop-78 -j DROP - inet6/filter/logdrop-78 -j DROP - inet/filter/limit-225 -m recent --name limit-225 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-225 -m recent --name limit-225 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 233 {"flow-limit":{"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-226 - inet6/filter/FORWARD -j limit-226 - inet/filter/INPUT -j limit-226 - inet6/filter/INPUT -j limit-226 - inet/filter/OUTPUT -j limit-226 - inet6/filter/OUTPUT -j limit-226 - inet/filter/limit-226 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-79 - inet6/filter/limit-226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-79 - inet/filter/logdrop-79 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-79 -m limit --limit 1/second -j LOG - inet/filter/logdrop-79 -j DROP - inet6/filter/logdrop-79 -j DROP - inet/filter/limit-226 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-226 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 370 {"action":"pass","flow-limit":1,"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-363 + inet6/filter/FORWARD -j limit-363 + inet/filter/INPUT -j limit-363 + inet6/filter/INPUT -j limit-363 + inet/filter/OUTPUT -j limit-363 + inet6/filter/OUTPUT -j limit-363 + inet/filter/limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-120 + inet6/filter/limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-120 + inet/filter/logdrop-120 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-120 -m limit --limit 1/second -j LOG + inet/filter/logdrop-120 -j DROP + inet6/filter/logdrop-120 -j DROP + inet/filter/limit-363 -m recent --name limit-363 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-363 -m recent --name limit-363 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 371 {"flow-limit":{}} +(filter-limit) + inet/filter/FORWARD -j limit-364 + inet6/filter/FORWARD -j limit-364 + inet/filter/INPUT -j limit-364 + inet6/filter/INPUT -j limit-364 + inet/filter/OUTPUT -j limit-364 + inet6/filter/OUTPUT -j limit-364 + inet/filter/limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-121 + inet6/filter/limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-121 + inet/filter/logdrop-121 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-121 -m limit --limit 1/second -j LOG + inet/filter/logdrop-121 -j DROP + inet6/filter/logdrop-121 -j DROP + inet/filter/limit-364 -m recent --name limit-364 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-364 -m recent --name limit-364 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -2953,199 +4525,83 @@ Filter 233 {"flow-limit":{"name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 234 {"action":"pass","flow-limit":{"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-227 - inet6/filter/FORWARD -j limit-227 - inet/filter/INPUT -j limit-227 - inet6/filter/INPUT -j limit-227 - inet/filter/OUTPUT -j limit-227 - inet6/filter/OUTPUT -j limit-227 - inet/filter/limit-227 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-80 - inet6/filter/limit-227 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-80 - inet/filter/logdrop-80 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-80 -m limit --limit 1/second -j LOG - inet/filter/logdrop-80 -j DROP - inet6/filter/logdrop-80 -j DROP - inet/filter/limit-227 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-227 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 235 {"flow-limit":{"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-228 - inet6/filter/FORWARD -j limit-228 - inet/filter/INPUT -j limit-228 - inet6/filter/INPUT -j limit-228 - inet/filter/OUTPUT -j limit-228 - inet6/filter/OUTPUT -j limit-228 - inet/filter/limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-81 - inet6/filter/limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-81 - inet/filter/logdrop-81 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-81 -m limit --limit 1/second -j LOG - inet/filter/logdrop-81 -j DROP - inet6/filter/logdrop-81 -j DROP - inet/filter/limit-228 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-228 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-2 - inet6/filter/FORWARD -j logaccept-final-2 - inet/filter/INPUT -j logaccept-final-2 - inet6/filter/INPUT -j logaccept-final-2 - inet/filter/OUTPUT -j logaccept-final-2 - inet6/filter/OUTPUT -j logaccept-final-2 - inet/filter/logaccept-final-2 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-2 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-2 -j ACCEPT - inet6/filter/logaccept-final-2 -j ACCEPT - -Filter 236 {"action":"pass","flow-limit":{"name":"A"},"log":true} +Filter 372 {"action":"pass","flow-limit":{}} (filter-limit) - inet/filter/FORWARD -j limit-229 - inet6/filter/FORWARD -j limit-229 - inet/filter/INPUT -j limit-229 - inet6/filter/INPUT -j limit-229 - inet/filter/OUTPUT -j limit-229 - inet6/filter/OUTPUT -j limit-229 - inet/filter/limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-82 - inet6/filter/limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-82 - inet/filter/logdrop-82 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-82 -m limit --limit 1/second -j LOG - inet/filter/logdrop-82 -j DROP - inet6/filter/logdrop-82 -j DROP - inet/filter/limit-229 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-229 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 237 {"flow-limit":{"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-230 - inet6/filter/FORWARD -j limit-230 - inet/filter/INPUT -j limit-230 - inet6/filter/INPUT -j limit-230 - inet/filter/OUTPUT -j limit-230 - inet6/filter/OUTPUT -j limit-230 - inet/filter/limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-83 - inet6/filter/limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-83 - inet/filter/logdrop-83 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-83 -m limit --limit 1/second -j LOG - inet/filter/logdrop-83 -j DROP - inet6/filter/logdrop-83 -j DROP - inet/filter/limit-230 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-230 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/FORWARD -j limit-365 + inet6/filter/FORWARD -j limit-365 + inet/filter/INPUT -j limit-365 + inet6/filter/INPUT -j limit-365 + inet/filter/OUTPUT -j limit-365 + inet6/filter/OUTPUT -j limit-365 + inet/filter/limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-122 + inet6/filter/limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-122 + inet/filter/logdrop-122 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-122 -m limit --limit 1/second -j LOG + inet/filter/logdrop-122 -j DROP + inet6/filter/logdrop-122 -j DROP + inet/filter/limit-365 -m recent --name limit-365 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-365 -m recent --name limit-365 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 238 {"action":"pass","flow-limit":{"name":"A"},"log":"none"} +Filter 373 {"flow-limit":{},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-231 - inet6/filter/FORWARD -j limit-231 - inet/filter/INPUT -j limit-231 - inet6/filter/INPUT -j limit-231 - inet/filter/OUTPUT -j limit-231 - inet6/filter/OUTPUT -j limit-231 - inet/filter/limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-84 - inet6/filter/limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-84 - inet/filter/logdrop-84 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-84 -m limit --limit 1/second -j LOG - inet/filter/logdrop-84 -j DROP - inet6/filter/logdrop-84 -j DROP - inet/filter/limit-231 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-231 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 239 {"flow-limit":{"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-232 - inet6/filter/FORWARD -j limit-232 - inet/filter/INPUT -j limit-232 - inet6/filter/INPUT -j limit-232 - inet/filter/OUTPUT -j limit-232 - inet6/filter/OUTPUT -j limit-232 - inet/filter/limit-232 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-85 - inet6/filter/limit-232 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-85 - inet/filter/logdrop-85 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-85 -m limit --limit 1/second -j LOG - inet/filter/logdrop-85 -j DROP - inet6/filter/logdrop-85 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/FORWARD -j limit-366 + inet6/filter/FORWARD -j limit-366 + inet/filter/INPUT -j limit-366 + inet6/filter/INPUT -j limit-366 + inet/filter/OUTPUT -j limit-366 + inet6/filter/OUTPUT -j limit-366 + inet/filter/limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-123 + inet6/filter/limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-123 + inet/filter/logdrop-123 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-123 -m limit --limit 1/second -j LOG + inet/filter/logdrop-123 -j DROP + inet6/filter/logdrop-123 -j DROP + inet/filter/limit-366 -m recent --name limit-366 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-366 -m recent --name limit-366 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-1 + inet6/filter/FORWARD -j logaccept-final-1 + inet/filter/INPUT -j logaccept-final-1 + inet6/filter/INPUT -j logaccept-final-1 + inet/filter/OUTPUT -j logaccept-final-1 + inet6/filter/OUTPUT -j logaccept-final-1 + inet/filter/logaccept-final-1 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-1 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-1 -j ACCEPT + inet6/filter/logaccept-final-1 -j ACCEPT -Filter 240 {"action":"pass","flow-limit":{"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-233 - inet6/filter/FORWARD -j limit-233 - inet/filter/INPUT -j limit-233 - inet6/filter/INPUT -j limit-233 - inet/filter/OUTPUT -j limit-233 - inet6/filter/OUTPUT -j limit-233 - inet/filter/limit-233 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-86 - inet6/filter/limit-233 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-86 - inet/filter/logdrop-86 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-86 -m limit --limit 1/second -j LOG - inet/filter/logdrop-86 -j DROP - inet6/filter/logdrop-86 -j DROP - -Filter 241 {"flow-limit":{"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-234 - inet6/filter/FORWARD -j limit-234 - inet/filter/INPUT -j limit-234 - inet6/filter/INPUT -j limit-234 - inet/filter/OUTPUT -j limit-234 - inet6/filter/OUTPUT -j limit-234 - inet/filter/limit-234 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-87 - inet6/filter/limit-234 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-87 - inet/filter/logdrop-87 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-87 -m limit --limit 1/second -j LOG - inet/filter/logdrop-87 -j DROP - inet6/filter/logdrop-87 -j DROP - inet/filter/FORWARD -j logaccept-final-3 - inet6/filter/FORWARD -j logaccept-final-3 - inet/filter/INPUT -j logaccept-final-3 - inet6/filter/INPUT -j logaccept-final-3 - inet/filter/OUTPUT -j logaccept-final-3 - inet6/filter/OUTPUT -j logaccept-final-3 - inet/filter/logaccept-final-3 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-3 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-3 -j ACCEPT - inet6/filter/logaccept-final-3 -j ACCEPT +Filter 374 {"action":"pass","flow-limit":{},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-367 + inet6/filter/FORWARD -j limit-367 + inet/filter/INPUT -j limit-367 + inet6/filter/INPUT -j limit-367 + inet/filter/OUTPUT -j limit-367 + inet6/filter/OUTPUT -j limit-367 + inet/filter/limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-124 + inet6/filter/limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-124 + inet/filter/logdrop-124 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-124 -m limit --limit 1/second -j LOG + inet/filter/logdrop-124 -j DROP + inet6/filter/logdrop-124 -j DROP + inet/filter/limit-367 -m recent --name limit-367 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-367 -m recent --name limit-367 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 242 {"action":"pass","flow-limit":{"name":"A","update":false},"log":true} +Filter 375 {"flow-limit":{},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-235 - inet6/filter/FORWARD -j limit-235 - inet/filter/INPUT -j limit-235 - inet6/filter/INPUT -j limit-235 - inet/filter/OUTPUT -j limit-235 - inet6/filter/OUTPUT -j limit-235 - inet/filter/limit-235 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-88 - inet6/filter/limit-235 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-88 - inet/filter/logdrop-88 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-88 -m limit --limit 1/second -j LOG - inet/filter/logdrop-88 -j DROP - inet6/filter/logdrop-88 -j DROP - inet/filter/limit-235 -m limit --limit 1/second -j LOG - inet6/filter/limit-235 -m limit --limit 1/second -j LOG - -Filter 243 {"flow-limit":{"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-236 - inet6/filter/FORWARD -j limit-236 - inet/filter/INPUT -j limit-236 - inet6/filter/INPUT -j limit-236 - inet/filter/OUTPUT -j limit-236 - inet6/filter/OUTPUT -j limit-236 - inet/filter/limit-236 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-89 - inet6/filter/limit-236 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-89 - inet/filter/logdrop-89 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-89 -m limit --limit 1/second -j LOG - inet/filter/logdrop-89 -j DROP - inet6/filter/logdrop-89 -j DROP + inet/filter/FORWARD -j limit-368 + inet6/filter/FORWARD -j limit-368 + inet/filter/INPUT -j limit-368 + inet6/filter/INPUT -j limit-368 + inet/filter/OUTPUT -j limit-368 + inet6/filter/OUTPUT -j limit-368 + inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-125 + inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-125 + inet/filter/logdrop-125 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-125 -m limit --limit 1/second -j LOG + inet/filter/logdrop-125 -j DROP + inet6/filter/logdrop-125 -j DROP + inet/filter/limit-368 -m recent --name limit-368 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-368 -m recent --name limit-368 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3153,37 +4609,39 @@ Filter 243 {"flow-limit":{"name":"A","update":false},"lo inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 244 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-237 - inet6/filter/FORWARD -j limit-237 - inet/filter/INPUT -j limit-237 - inet6/filter/INPUT -j limit-237 - inet/filter/OUTPUT -j limit-237 - inet6/filter/OUTPUT -j limit-237 - inet/filter/limit-237 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-90 - inet6/filter/limit-237 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-90 - inet/filter/logdrop-90 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-90 -m limit --limit 1/second -j LOG - inet/filter/logdrop-90 -j DROP - inet6/filter/logdrop-90 -j DROP - -Filter 245 {"flow-limit":{"addr":"dest","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-238 - inet6/filter/FORWARD -j limit-238 - inet/filter/INPUT -j limit-238 - inet6/filter/INPUT -j limit-238 - inet/filter/OUTPUT -j limit-238 - inet6/filter/OUTPUT -j limit-238 - inet/filter/limit-238 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-91 - inet6/filter/limit-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-91 - inet/filter/logdrop-91 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-91 -m limit --limit 1/second -j LOG - inet/filter/logdrop-91 -j DROP - inet6/filter/logdrop-91 -j DROP - inet/filter/limit-238 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-238 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 376 {"action":"pass","flow-limit":{},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-369 + inet6/filter/FORWARD -j limit-369 + inet/filter/INPUT -j limit-369 + inet6/filter/INPUT -j limit-369 + inet/filter/OUTPUT -j limit-369 + inet6/filter/OUTPUT -j limit-369 + inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-126 + inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-126 + inet/filter/logdrop-126 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-126 -m limit --limit 1/second -j LOG + inet/filter/logdrop-126 -j DROP + inet6/filter/logdrop-126 -j DROP + inet/filter/limit-369 -m recent --name limit-369 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-369 -m recent --name limit-369 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 377 {"flow-limit":{"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-370 + inet6/filter/FORWARD -j limit-370 + inet/filter/INPUT -j limit-370 + inet6/filter/INPUT -j limit-370 + inet/filter/OUTPUT -j limit-370 + inet6/filter/OUTPUT -j limit-370 + inet/filter/limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-127 + inet6/filter/limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-127 + inet/filter/logdrop-127 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-127 -m limit --limit 1/second -j LOG + inet/filter/logdrop-127 -j DROP + inet6/filter/logdrop-127 -j DROP + inet/filter/limit-370 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-370 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3191,83 +4649,83 @@ Filter 245 {"flow-limit":{"addr":"dest","name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 246 {"action":"pass","flow-limit":{"addr":"dest","name":"A"}} +Filter 378 {"action":"pass","flow-limit":{"name":"A"}} (filter-limit) - inet/filter/FORWARD -j limit-239 - inet6/filter/FORWARD -j limit-239 - inet/filter/INPUT -j limit-239 - inet6/filter/INPUT -j limit-239 - inet/filter/OUTPUT -j limit-239 - inet6/filter/OUTPUT -j limit-239 - inet/filter/limit-239 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-92 - inet6/filter/limit-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-92 - inet/filter/logdrop-92 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-92 -m limit --limit 1/second -j LOG - inet/filter/logdrop-92 -j DROP - inet6/filter/logdrop-92 -j DROP - inet/filter/limit-239 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-239 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 247 {"flow-limit":{"addr":"dest","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-240 - inet6/filter/FORWARD -j limit-240 - inet/filter/INPUT -j limit-240 - inet6/filter/INPUT -j limit-240 - inet/filter/OUTPUT -j limit-240 - inet6/filter/OUTPUT -j limit-240 - inet/filter/limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-93 - inet6/filter/limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-93 - inet/filter/logdrop-93 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-93 -m limit --limit 1/second -j LOG - inet/filter/logdrop-93 -j DROP - inet6/filter/logdrop-93 -j DROP - inet/filter/limit-240 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-240 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-4 - inet6/filter/FORWARD -j logaccept-final-4 - inet/filter/INPUT -j logaccept-final-4 - inet6/filter/INPUT -j logaccept-final-4 - inet/filter/OUTPUT -j logaccept-final-4 - inet6/filter/OUTPUT -j logaccept-final-4 - inet/filter/logaccept-final-4 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-4 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-4 -j ACCEPT - inet6/filter/logaccept-final-4 -j ACCEPT + inet/filter/FORWARD -j limit-371 + inet6/filter/FORWARD -j limit-371 + inet/filter/INPUT -j limit-371 + inet6/filter/INPUT -j limit-371 + inet/filter/OUTPUT -j limit-371 + inet6/filter/OUTPUT -j limit-371 + inet/filter/limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-128 + inet6/filter/limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-128 + inet/filter/logdrop-128 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-128 -m limit --limit 1/second -j LOG + inet/filter/logdrop-128 -j DROP + inet6/filter/logdrop-128 -j DROP + inet/filter/limit-371 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-371 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 248 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":true} +Filter 379 {"flow-limit":{"name":"A"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-241 - inet6/filter/FORWARD -j limit-241 - inet/filter/INPUT -j limit-241 - inet6/filter/INPUT -j limit-241 - inet/filter/OUTPUT -j limit-241 - inet6/filter/OUTPUT -j limit-241 - inet/filter/limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-94 - inet6/filter/limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-94 - inet/filter/logdrop-94 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-94 -m limit --limit 1/second -j LOG - inet/filter/logdrop-94 -j DROP - inet6/filter/logdrop-94 -j DROP - inet/filter/limit-241 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-241 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 249 {"flow-limit":{"addr":"dest","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-242 - inet6/filter/FORWARD -j limit-242 - inet/filter/INPUT -j limit-242 - inet6/filter/INPUT -j limit-242 - inet/filter/OUTPUT -j limit-242 - inet6/filter/OUTPUT -j limit-242 - inet/filter/limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-95 - inet6/filter/limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-95 - inet/filter/logdrop-95 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-95 -m limit --limit 1/second -j LOG - inet/filter/logdrop-95 -j DROP - inet6/filter/logdrop-95 -j DROP - inet/filter/limit-242 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-242 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-372 + inet6/filter/FORWARD -j limit-372 + inet/filter/INPUT -j limit-372 + inet6/filter/INPUT -j limit-372 + inet/filter/OUTPUT -j limit-372 + inet6/filter/OUTPUT -j limit-372 + inet/filter/limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-129 + inet6/filter/limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-129 + inet/filter/logdrop-129 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-129 -m limit --limit 1/second -j LOG + inet/filter/logdrop-129 -j DROP + inet6/filter/logdrop-129 -j DROP + inet/filter/limit-372 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-372 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-2 + inet6/filter/FORWARD -j logaccept-final-2 + inet/filter/INPUT -j logaccept-final-2 + inet6/filter/INPUT -j logaccept-final-2 + inet/filter/OUTPUT -j logaccept-final-2 + inet6/filter/OUTPUT -j logaccept-final-2 + inet/filter/logaccept-final-2 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-2 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-2 -j ACCEPT + inet6/filter/logaccept-final-2 -j ACCEPT + +Filter 380 {"action":"pass","flow-limit":{"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-373 + inet6/filter/FORWARD -j limit-373 + inet/filter/INPUT -j limit-373 + inet6/filter/INPUT -j limit-373 + inet/filter/OUTPUT -j limit-373 + inet6/filter/OUTPUT -j limit-373 + inet/filter/limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-130 + inet6/filter/limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-130 + inet/filter/logdrop-130 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-130 -m limit --limit 1/second -j LOG + inet/filter/logdrop-130 -j DROP + inet6/filter/logdrop-130 -j DROP + inet/filter/limit-373 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-373 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 381 {"flow-limit":{"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-374 + inet6/filter/FORWARD -j limit-374 + inet/filter/INPUT -j limit-374 + inet6/filter/INPUT -j limit-374 + inet/filter/OUTPUT -j limit-374 + inet6/filter/OUTPUT -j limit-374 + inet/filter/limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-131 + inet6/filter/limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-131 + inet/filter/logdrop-131 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-131 -m limit --limit 1/second -j LOG + inet/filter/logdrop-131 -j DROP + inet6/filter/logdrop-131 -j DROP + inet/filter/limit-374 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-374 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3275,37 +4733,37 @@ Filter 249 {"flow-limit":{"addr":"dest","name":"A"},"log inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 250 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"none"} +Filter 382 {"action":"pass","flow-limit":{"name":"A"},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-243 - inet6/filter/FORWARD -j limit-243 - inet/filter/INPUT -j limit-243 - inet6/filter/INPUT -j limit-243 - inet/filter/OUTPUT -j limit-243 - inet6/filter/OUTPUT -j limit-243 - inet/filter/limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-96 - inet6/filter/limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-96 - inet/filter/logdrop-96 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-96 -m limit --limit 1/second -j LOG - inet/filter/logdrop-96 -j DROP - inet6/filter/logdrop-96 -j DROP - inet/filter/limit-243 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-243 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 251 {"flow-limit":{"addr":"dest","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-244 - inet6/filter/FORWARD -j limit-244 - inet/filter/INPUT -j limit-244 - inet6/filter/INPUT -j limit-244 - inet/filter/OUTPUT -j limit-244 - inet6/filter/OUTPUT -j limit-244 - inet/filter/limit-244 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-97 - inet6/filter/limit-244 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-97 - inet/filter/logdrop-97 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-97 -m limit --limit 1/second -j LOG - inet/filter/logdrop-97 -j DROP - inet6/filter/logdrop-97 -j DROP + inet/filter/FORWARD -j limit-375 + inet6/filter/FORWARD -j limit-375 + inet/filter/INPUT -j limit-375 + inet6/filter/INPUT -j limit-375 + inet/filter/OUTPUT -j limit-375 + inet6/filter/OUTPUT -j limit-375 + inet/filter/limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-132 + inet6/filter/limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-132 + inet/filter/logdrop-132 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-132 -m limit --limit 1/second -j LOG + inet/filter/logdrop-132 -j DROP + inet6/filter/logdrop-132 -j DROP + inet/filter/limit-375 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-375 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 383 {"flow-limit":{"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-376 + inet6/filter/FORWARD -j limit-376 + inet/filter/INPUT -j limit-376 + inet6/filter/INPUT -j limit-376 + inet/filter/OUTPUT -j limit-376 + inet6/filter/OUTPUT -j limit-376 + inet/filter/limit-376 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-133 + inet6/filter/limit-376 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-133 + inet/filter/logdrop-133 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-133 -m limit --limit 1/second -j LOG + inet/filter/logdrop-133 -j DROP + inet6/filter/logdrop-133 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3313,179 +4771,77 @@ Filter 251 {"flow-limit":{"addr":"dest","name":"A","upda inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 252 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-245 - inet6/filter/FORWARD -j limit-245 - inet/filter/INPUT -j limit-245 - inet6/filter/INPUT -j limit-245 - inet/filter/OUTPUT -j limit-245 - inet6/filter/OUTPUT -j limit-245 - inet/filter/limit-245 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-98 - inet6/filter/limit-245 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-98 - inet/filter/logdrop-98 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-98 -m limit --limit 1/second -j LOG - inet/filter/logdrop-98 -j DROP - inet6/filter/logdrop-98 -j DROP - -Filter 253 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-246 - inet6/filter/FORWARD -j limit-246 - inet/filter/INPUT -j limit-246 - inet6/filter/INPUT -j limit-246 - inet/filter/OUTPUT -j limit-246 - inet6/filter/OUTPUT -j limit-246 - inet/filter/limit-246 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-99 - inet6/filter/limit-246 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-99 - inet/filter/logdrop-99 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-99 -m limit --limit 1/second -j LOG - inet/filter/logdrop-99 -j DROP - inet6/filter/logdrop-99 -j DROP - inet/filter/FORWARD -j logaccept-final-5 - inet6/filter/FORWARD -j logaccept-final-5 - inet/filter/INPUT -j logaccept-final-5 - inet6/filter/INPUT -j logaccept-final-5 - inet/filter/OUTPUT -j logaccept-final-5 - inet6/filter/OUTPUT -j logaccept-final-5 - inet/filter/logaccept-final-5 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-5 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-5 -j ACCEPT - inet6/filter/logaccept-final-5 -j ACCEPT - -Filter 254 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +Filter 384 {"action":"pass","flow-limit":{"name":"A","update":false}} (filter-limit) - inet/filter/FORWARD -j limit-247 - inet6/filter/FORWARD -j limit-247 - inet/filter/INPUT -j limit-247 - inet6/filter/INPUT -j limit-247 - inet/filter/OUTPUT -j limit-247 - inet6/filter/OUTPUT -j limit-247 - inet/filter/limit-247 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-100 - inet6/filter/limit-247 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-100 - inet/filter/logdrop-100 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-100 -m limit --limit 1/second -j LOG - inet/filter/logdrop-100 -j DROP - inet6/filter/logdrop-100 -j DROP - inet/filter/limit-247 -m limit --limit 1/second -j LOG - inet6/filter/limit-247 -m limit --limit 1/second -j LOG - -Filter 255 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-248 - inet6/filter/FORWARD -j limit-248 - inet/filter/INPUT -j limit-248 - inet6/filter/INPUT -j limit-248 - inet/filter/OUTPUT -j limit-248 - inet6/filter/OUTPUT -j limit-248 - inet/filter/limit-248 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-101 - inet6/filter/limit-248 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-101 - inet/filter/logdrop-101 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-101 -m limit --limit 1/second -j LOG - inet/filter/logdrop-101 -j DROP - inet6/filter/logdrop-101 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/FORWARD -j limit-377 + inet6/filter/FORWARD -j limit-377 + inet/filter/INPUT -j limit-377 + inet6/filter/INPUT -j limit-377 + inet/filter/OUTPUT -j limit-377 + inet6/filter/OUTPUT -j limit-377 + inet/filter/limit-377 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-134 + inet6/filter/limit-377 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-134 + inet/filter/logdrop-134 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-134 -m limit --limit 1/second -j LOG + inet/filter/logdrop-134 -j DROP + inet6/filter/logdrop-134 -j DROP -Filter 256 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-249 - inet6/filter/FORWARD -j limit-249 - inet/filter/INPUT -j limit-249 - inet6/filter/INPUT -j limit-249 - inet/filter/OUTPUT -j limit-249 - inet6/filter/OUTPUT -j limit-249 - inet/filter/limit-249 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-102 - inet6/filter/limit-249 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-102 - inet/filter/logdrop-102 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-102 -m limit --limit 1/second -j LOG - inet/filter/logdrop-102 -j DROP - inet6/filter/logdrop-102 -j DROP - -Filter 257 {"flow-limit":{"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-250 - inet6/filter/FORWARD -j limit-250 - inet/filter/INPUT -j limit-250 - inet6/filter/INPUT -j limit-250 - inet/filter/OUTPUT -j limit-250 - inet6/filter/OUTPUT -j limit-250 - inet/filter/limit-250 -m recent --name limit-250 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-250 -m recent --name limit-250 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-250 -m recent --name limit-250 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-250 -m recent --name limit-250 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT +Filter 385 {"flow-limit":{"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-378 + inet6/filter/FORWARD -j limit-378 + inet/filter/INPUT -j limit-378 + inet6/filter/INPUT -j limit-378 + inet/filter/OUTPUT -j limit-378 + inet6/filter/OUTPUT -j limit-378 + inet/filter/limit-378 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-135 + inet6/filter/limit-378 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-135 + inet/filter/logdrop-135 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-135 -m limit --limit 1/second -j LOG + inet/filter/logdrop-135 -j DROP + inet6/filter/logdrop-135 -j DROP + inet/filter/FORWARD -j logaccept-final-3 + inet6/filter/FORWARD -j logaccept-final-3 + inet/filter/INPUT -j logaccept-final-3 + inet6/filter/INPUT -j logaccept-final-3 + inet/filter/OUTPUT -j logaccept-final-3 + inet6/filter/OUTPUT -j logaccept-final-3 + inet/filter/logaccept-final-3 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-3 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-3 -j ACCEPT + inet6/filter/logaccept-final-3 -j ACCEPT -Filter 258 {"action":"pass","flow-limit":{"log":false}} -(filter-limit) - inet/filter/FORWARD -j limit-251 - inet6/filter/FORWARD -j limit-251 - inet/filter/INPUT -j limit-251 - inet6/filter/INPUT -j limit-251 - inet/filter/OUTPUT -j limit-251 - inet6/filter/OUTPUT -j limit-251 - inet/filter/limit-251 -m recent --name limit-251 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-251 -m recent --name limit-251 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-251 -m recent --name limit-251 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-251 -m recent --name limit-251 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 259 {"flow-limit":{"log":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-252 - inet6/filter/FORWARD -j limit-252 - inet/filter/INPUT -j limit-252 - inet6/filter/INPUT -j limit-252 - inet/filter/OUTPUT -j limit-252 - inet6/filter/OUTPUT -j limit-252 - inet/filter/limit-252 -m recent --name limit-252 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-252 -m recent --name limit-252 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-252 -m recent --name limit-252 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-252 -m recent --name limit-252 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-6 - inet6/filter/FORWARD -j logaccept-final-6 - inet/filter/INPUT -j logaccept-final-6 - inet6/filter/INPUT -j logaccept-final-6 - inet/filter/OUTPUT -j logaccept-final-6 - inet6/filter/OUTPUT -j logaccept-final-6 - inet/filter/logaccept-final-6 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-6 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-6 -j ACCEPT - inet6/filter/logaccept-final-6 -j ACCEPT +Filter 386 {"action":"pass","flow-limit":{"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-379 + inet6/filter/FORWARD -j limit-379 + inet/filter/INPUT -j limit-379 + inet6/filter/INPUT -j limit-379 + inet/filter/OUTPUT -j limit-379 + inet6/filter/OUTPUT -j limit-379 + inet/filter/limit-379 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-136 + inet6/filter/limit-379 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-136 + inet/filter/logdrop-136 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-136 -m limit --limit 1/second -j LOG + inet/filter/logdrop-136 -j DROP + inet6/filter/logdrop-136 -j DROP + inet/filter/limit-379 -m limit --limit 1/second -j LOG + inet6/filter/limit-379 -m limit --limit 1/second -j LOG -Filter 260 {"action":"pass","flow-limit":{"log":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-253 - inet6/filter/FORWARD -j limit-253 - inet/filter/INPUT -j limit-253 - inet6/filter/INPUT -j limit-253 - inet/filter/OUTPUT -j limit-253 - inet6/filter/OUTPUT -j limit-253 - inet/filter/limit-253 -m recent --name limit-253 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-253 -m recent --name limit-253 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-253 -m recent --name limit-253 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-253 -m recent --name limit-253 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 261 {"flow-limit":{"log":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-254 - inet6/filter/FORWARD -j limit-254 - inet/filter/INPUT -j limit-254 - inet6/filter/INPUT -j limit-254 - inet/filter/OUTPUT -j limit-254 - inet6/filter/OUTPUT -j limit-254 - inet/filter/limit-254 -m recent --name limit-254 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-254 -m recent --name limit-254 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-254 -m recent --name limit-254 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-254 -m recent --name limit-254 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 387 {"flow-limit":{"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-380 + inet6/filter/FORWARD -j limit-380 + inet/filter/INPUT -j limit-380 + inet6/filter/INPUT -j limit-380 + inet/filter/OUTPUT -j limit-380 + inet6/filter/OUTPUT -j limit-380 + inet/filter/limit-380 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-137 + inet6/filter/limit-380 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-137 + inet/filter/logdrop-137 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-137 -m limit --limit 1/second -j LOG + inet/filter/logdrop-137 -j DROP + inet6/filter/logdrop-137 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3493,31 +4849,37 @@ Filter 261 {"flow-limit":{"log":false},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 262 {"action":"pass","flow-limit":{"log":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-255 - inet6/filter/FORWARD -j limit-255 - inet/filter/INPUT -j limit-255 - inet6/filter/INPUT -j limit-255 - inet/filter/OUTPUT -j limit-255 - inet6/filter/OUTPUT -j limit-255 - inet/filter/limit-255 -m recent --name limit-255 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-255 -m recent --name limit-255 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-255 -m recent --name limit-255 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-255 -m recent --name limit-255 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 263 {"flow-limit":{"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-256 - inet6/filter/FORWARD -j limit-256 - inet/filter/INPUT -j limit-256 - inet6/filter/INPUT -j limit-256 - inet/filter/OUTPUT -j limit-256 - inet6/filter/OUTPUT -j limit-256 - inet/filter/limit-256 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-256 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-256 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 388 {"action":"pass","flow-limit":{"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-381 + inet6/filter/FORWARD -j limit-381 + inet/filter/INPUT -j limit-381 + inet6/filter/INPUT -j limit-381 + inet/filter/OUTPUT -j limit-381 + inet6/filter/OUTPUT -j limit-381 + inet/filter/limit-381 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-138 + inet6/filter/limit-381 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-138 + inet/filter/logdrop-138 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-138 -m limit --limit 1/second -j LOG + inet/filter/logdrop-138 -j DROP + inet6/filter/logdrop-138 -j DROP + +Filter 389 {"flow-limit":{"addr":"dest","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-382 + inet6/filter/FORWARD -j limit-382 + inet/filter/INPUT -j limit-382 + inet6/filter/INPUT -j limit-382 + inet/filter/OUTPUT -j limit-382 + inet6/filter/OUTPUT -j limit-382 + inet/filter/limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-139 + inet6/filter/limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-139 + inet/filter/logdrop-139 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-139 -m limit --limit 1/second -j LOG + inet/filter/logdrop-139 -j DROP + inet6/filter/logdrop-139 -j DROP + inet/filter/limit-382 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-382 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3525,67 +4887,83 @@ Filter 263 {"flow-limit":{"log":false,"name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 264 {"action":"pass","flow-limit":{"log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-257 - inet6/filter/FORWARD -j limit-257 - inet/filter/INPUT -j limit-257 - inet6/filter/INPUT -j limit-257 - inet/filter/OUTPUT -j limit-257 - inet6/filter/OUTPUT -j limit-257 - inet/filter/limit-257 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-257 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-257 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 265 {"flow-limit":{"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-258 - inet6/filter/FORWARD -j limit-258 - inet/filter/INPUT -j limit-258 - inet6/filter/INPUT -j limit-258 - inet/filter/OUTPUT -j limit-258 - inet6/filter/OUTPUT -j limit-258 - inet/filter/limit-258 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-258 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-258 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-7 - inet6/filter/FORWARD -j logaccept-final-7 - inet/filter/INPUT -j logaccept-final-7 - inet6/filter/INPUT -j logaccept-final-7 - inet/filter/OUTPUT -j logaccept-final-7 - inet6/filter/OUTPUT -j logaccept-final-7 - inet/filter/logaccept-final-7 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-7 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-7 -j ACCEPT - inet6/filter/logaccept-final-7 -j ACCEPT +Filter 390 {"action":"pass","flow-limit":{"addr":"dest","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-383 + inet6/filter/FORWARD -j limit-383 + inet/filter/INPUT -j limit-383 + inet6/filter/INPUT -j limit-383 + inet/filter/OUTPUT -j limit-383 + inet6/filter/OUTPUT -j limit-383 + inet/filter/limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-140 + inet6/filter/limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-140 + inet/filter/logdrop-140 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-140 -m limit --limit 1/second -j LOG + inet/filter/logdrop-140 -j DROP + inet6/filter/logdrop-140 -j DROP + inet/filter/limit-383 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-383 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 391 {"flow-limit":{"addr":"dest","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-384 + inet6/filter/FORWARD -j limit-384 + inet/filter/INPUT -j limit-384 + inet6/filter/INPUT -j limit-384 + inet/filter/OUTPUT -j limit-384 + inet6/filter/OUTPUT -j limit-384 + inet/filter/limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-141 + inet6/filter/limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-141 + inet/filter/logdrop-141 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-141 -m limit --limit 1/second -j LOG + inet/filter/logdrop-141 -j DROP + inet6/filter/logdrop-141 -j DROP + inet/filter/limit-384 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-384 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-4 + inet6/filter/FORWARD -j logaccept-final-4 + inet/filter/INPUT -j logaccept-final-4 + inet6/filter/INPUT -j logaccept-final-4 + inet/filter/OUTPUT -j logaccept-final-4 + inet6/filter/OUTPUT -j logaccept-final-4 + inet/filter/logaccept-final-4 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-4 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-4 -j ACCEPT + inet6/filter/logaccept-final-4 -j ACCEPT + +Filter 392 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-385 + inet6/filter/FORWARD -j limit-385 + inet/filter/INPUT -j limit-385 + inet6/filter/INPUT -j limit-385 + inet/filter/OUTPUT -j limit-385 + inet6/filter/OUTPUT -j limit-385 + inet/filter/limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-142 + inet6/filter/limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-142 + inet/filter/logdrop-142 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-142 -m limit --limit 1/second -j LOG + inet/filter/logdrop-142 -j DROP + inet6/filter/logdrop-142 -j DROP + inet/filter/limit-385 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-385 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG -Filter 266 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-259 - inet6/filter/FORWARD -j limit-259 - inet/filter/INPUT -j limit-259 - inet6/filter/INPUT -j limit-259 - inet/filter/OUTPUT -j limit-259 - inet6/filter/OUTPUT -j limit-259 - inet/filter/limit-259 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-259 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-259 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-259 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 267 {"flow-limit":{"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-260 - inet6/filter/FORWARD -j limit-260 - inet/filter/INPUT -j limit-260 - inet6/filter/INPUT -j limit-260 - inet/filter/OUTPUT -j limit-260 - inet6/filter/OUTPUT -j limit-260 - inet/filter/limit-260 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-260 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-260 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-260 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 393 {"flow-limit":{"addr":"dest","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-386 + inet6/filter/FORWARD -j limit-386 + inet/filter/INPUT -j limit-386 + inet6/filter/INPUT -j limit-386 + inet/filter/OUTPUT -j limit-386 + inet6/filter/OUTPUT -j limit-386 + inet/filter/limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-143 + inet6/filter/limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-143 + inet/filter/logdrop-143 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-143 -m limit --limit 1/second -j LOG + inet/filter/logdrop-143 -j DROP + inet6/filter/logdrop-143 -j DROP + inet/filter/limit-386 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-386 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3593,29 +4971,37 @@ Filter 267 {"flow-limit":{"log":false,"name":"A"},"log": inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 268 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-261 - inet6/filter/FORWARD -j limit-261 - inet/filter/INPUT -j limit-261 - inet6/filter/INPUT -j limit-261 - inet/filter/OUTPUT -j limit-261 - inet6/filter/OUTPUT -j limit-261 - inet/filter/limit-261 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-261 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-261 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-261 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 269 {"flow-limit":{"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-262 - inet6/filter/FORWARD -j limit-262 - inet/filter/INPUT -j limit-262 - inet6/filter/INPUT -j limit-262 - inet/filter/OUTPUT -j limit-262 - inet6/filter/OUTPUT -j limit-262 - inet/filter/limit-262 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-262 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 394 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-387 + inet6/filter/FORWARD -j limit-387 + inet/filter/INPUT -j limit-387 + inet6/filter/INPUT -j limit-387 + inet/filter/OUTPUT -j limit-387 + inet6/filter/OUTPUT -j limit-387 + inet/filter/limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-144 + inet6/filter/limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-144 + inet/filter/logdrop-144 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-144 -m limit --limit 1/second -j LOG + inet/filter/logdrop-144 -j DROP + inet6/filter/logdrop-144 -j DROP + inet/filter/limit-387 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-387 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 395 {"flow-limit":{"addr":"dest","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-388 + inet6/filter/FORWARD -j limit-388 + inet/filter/INPUT -j limit-388 + inet6/filter/INPUT -j limit-388 + inet/filter/OUTPUT -j limit-388 + inet6/filter/OUTPUT -j limit-388 + inet/filter/limit-388 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-145 + inet6/filter/limit-388 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-145 + inet/filter/logdrop-145 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-145 -m limit --limit 1/second -j LOG + inet/filter/logdrop-145 -j DROP + inet6/filter/logdrop-145 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3623,61 +5009,77 @@ Filter 269 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 270 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-263 - inet6/filter/FORWARD -j limit-263 - inet/filter/INPUT -j limit-263 - inet6/filter/INPUT -j limit-263 - inet/filter/OUTPUT -j limit-263 - inet6/filter/OUTPUT -j limit-263 - inet/filter/limit-263 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-263 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 271 {"flow-limit":{"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-264 - inet6/filter/FORWARD -j limit-264 - inet/filter/INPUT -j limit-264 - inet6/filter/INPUT -j limit-264 - inet/filter/OUTPUT -j limit-264 - inet6/filter/OUTPUT -j limit-264 - inet/filter/limit-264 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-264 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-8 - inet6/filter/FORWARD -j logaccept-final-8 - inet/filter/INPUT -j logaccept-final-8 - inet6/filter/INPUT -j logaccept-final-8 - inet/filter/OUTPUT -j logaccept-final-8 - inet6/filter/OUTPUT -j logaccept-final-8 - inet/filter/logaccept-final-8 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-8 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-8 -j ACCEPT - inet6/filter/logaccept-final-8 -j ACCEPT +Filter 396 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-389 + inet6/filter/FORWARD -j limit-389 + inet/filter/INPUT -j limit-389 + inet6/filter/INPUT -j limit-389 + inet/filter/OUTPUT -j limit-389 + inet6/filter/OUTPUT -j limit-389 + inet/filter/limit-389 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-146 + inet6/filter/limit-389 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-146 + inet/filter/logdrop-146 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-146 -m limit --limit 1/second -j LOG + inet/filter/logdrop-146 -j DROP + inet6/filter/logdrop-146 -j DROP + +Filter 397 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-390 + inet6/filter/FORWARD -j limit-390 + inet/filter/INPUT -j limit-390 + inet6/filter/INPUT -j limit-390 + inet/filter/OUTPUT -j limit-390 + inet6/filter/OUTPUT -j limit-390 + inet/filter/limit-390 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-147 + inet6/filter/limit-390 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-147 + inet/filter/logdrop-147 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-147 -m limit --limit 1/second -j LOG + inet/filter/logdrop-147 -j DROP + inet6/filter/logdrop-147 -j DROP + inet/filter/FORWARD -j logaccept-final-5 + inet6/filter/FORWARD -j logaccept-final-5 + inet/filter/INPUT -j logaccept-final-5 + inet6/filter/INPUT -j logaccept-final-5 + inet/filter/OUTPUT -j logaccept-final-5 + inet6/filter/OUTPUT -j logaccept-final-5 + inet/filter/logaccept-final-5 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-5 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-5 -j ACCEPT + inet6/filter/logaccept-final-5 -j ACCEPT + +Filter 398 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-391 + inet6/filter/FORWARD -j limit-391 + inet/filter/INPUT -j limit-391 + inet6/filter/INPUT -j limit-391 + inet/filter/OUTPUT -j limit-391 + inet6/filter/OUTPUT -j limit-391 + inet/filter/limit-391 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-148 + inet6/filter/limit-391 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-148 + inet/filter/logdrop-148 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-148 -m limit --limit 1/second -j LOG + inet/filter/logdrop-148 -j DROP + inet6/filter/logdrop-148 -j DROP + inet/filter/limit-391 -m limit --limit 1/second -j LOG + inet6/filter/limit-391 -m limit --limit 1/second -j LOG -Filter 272 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-265 - inet6/filter/FORWARD -j limit-265 - inet/filter/INPUT -j limit-265 - inet6/filter/INPUT -j limit-265 - inet/filter/OUTPUT -j limit-265 - inet6/filter/OUTPUT -j limit-265 - inet/filter/limit-265 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-265 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-265 -m limit --limit 1/second -j LOG - inet6/filter/limit-265 -m limit --limit 1/second -j LOG - -Filter 273 {"flow-limit":{"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-266 - inet6/filter/FORWARD -j limit-266 - inet/filter/INPUT -j limit-266 - inet6/filter/INPUT -j limit-266 - inet/filter/OUTPUT -j limit-266 - inet6/filter/OUTPUT -j limit-266 - inet/filter/limit-266 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-266 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 399 {"flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-392 + inet6/filter/FORWARD -j limit-392 + inet/filter/INPUT -j limit-392 + inet6/filter/INPUT -j limit-392 + inet/filter/OUTPUT -j limit-392 + inet6/filter/OUTPUT -j limit-392 + inet/filter/limit-392 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-149 + inet6/filter/limit-392 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-149 + inet/filter/logdrop-149 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-149 -m limit --limit 1/second -j LOG + inet/filter/logdrop-149 -j DROP + inet6/filter/logdrop-149 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3685,97 +5087,37 @@ Filter 273 {"flow-limit":{"log":false,"name":"A","update inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 274 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-267 - inet6/filter/FORWARD -j limit-267 - inet/filter/INPUT -j limit-267 - inet6/filter/INPUT -j limit-267 - inet/filter/OUTPUT -j limit-267 - inet6/filter/OUTPUT -j limit-267 - inet/filter/limit-267 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-267 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 275 {"flow-limit":{"addr":"dest","log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-268 - inet6/filter/FORWARD -j limit-268 - inet/filter/INPUT -j limit-268 - inet6/filter/INPUT -j limit-268 - inet/filter/OUTPUT -j limit-268 - inet6/filter/OUTPUT -j limit-268 - inet/filter/limit-268 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-268 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-268 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT - -Filter 276 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-269 - inet6/filter/FORWARD -j limit-269 - inet/filter/INPUT -j limit-269 - inet6/filter/INPUT -j limit-269 - inet/filter/OUTPUT -j limit-269 - inet6/filter/OUTPUT -j limit-269 - inet/filter/limit-269 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-269 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-269 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 277 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-270 - inet6/filter/FORWARD -j limit-270 - inet/filter/INPUT -j limit-270 - inet6/filter/INPUT -j limit-270 - inet/filter/OUTPUT -j limit-270 - inet6/filter/OUTPUT -j limit-270 - inet/filter/limit-270 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-270 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-270 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-9 - inet6/filter/FORWARD -j logaccept-final-9 - inet/filter/INPUT -j logaccept-final-9 - inet6/filter/INPUT -j logaccept-final-9 - inet/filter/OUTPUT -j logaccept-final-9 - inet6/filter/OUTPUT -j logaccept-final-9 - inet/filter/logaccept-final-9 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-9 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-9 -j ACCEPT - inet6/filter/logaccept-final-9 -j ACCEPT +Filter 400 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-393 + inet6/filter/FORWARD -j limit-393 + inet/filter/INPUT -j limit-393 + inet6/filter/INPUT -j limit-393 + inet/filter/OUTPUT -j limit-393 + inet6/filter/OUTPUT -j limit-393 + inet/filter/limit-393 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-150 + inet6/filter/limit-393 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-150 + inet/filter/logdrop-150 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-150 -m limit --limit 1/second -j LOG + inet/filter/logdrop-150 -j DROP + inet6/filter/logdrop-150 -j DROP -Filter 278 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-271 - inet6/filter/FORWARD -j limit-271 - inet/filter/INPUT -j limit-271 - inet6/filter/INPUT -j limit-271 - inet/filter/OUTPUT -j limit-271 - inet6/filter/OUTPUT -j limit-271 - inet/filter/limit-271 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-271 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-271 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-271 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 279 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-272 - inet6/filter/FORWARD -j limit-272 - inet/filter/INPUT -j limit-272 - inet6/filter/INPUT -j limit-272 - inet/filter/OUTPUT -j limit-272 - inet6/filter/OUTPUT -j limit-272 - inet/filter/limit-272 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-272 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-272 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-272 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 401 {"flow-limit":{"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-394 + inet6/filter/FORWARD -j limit-394 + inet/filter/INPUT -j limit-394 + inet6/filter/INPUT -j limit-394 + inet/filter/OUTPUT -j limit-394 + inet6/filter/OUTPUT -j limit-394 + inet/filter/limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-151 + inet6/filter/limit-394 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-151 + inet/filter/logdrop-151 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-151 -m limit --limit 1/second -j LOG + inet/filter/logdrop-151 -j DROP + inet6/filter/logdrop-151 -j DROP + inet/filter/limit-394 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-394 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3783,121 +5125,83 @@ Filter 279 {"flow-limit":{"addr":"dest","log":false,"nam inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 280 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-273 - inet6/filter/FORWARD -j limit-273 - inet/filter/INPUT -j limit-273 - inet6/filter/INPUT -j limit-273 - inet/filter/OUTPUT -j limit-273 - inet6/filter/OUTPUT -j limit-273 - inet/filter/limit-273 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-273 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-273 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-273 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 281 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-274 - inet6/filter/FORWARD -j limit-274 - inet/filter/INPUT -j limit-274 - inet6/filter/INPUT -j limit-274 - inet/filter/OUTPUT -j limit-274 - inet6/filter/OUTPUT -j limit-274 - inet/filter/limit-274 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-274 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT +Filter 402 {"action":"pass","flow-limit":{"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-395 + inet6/filter/FORWARD -j limit-395 + inet/filter/INPUT -j limit-395 + inet6/filter/INPUT -j limit-395 + inet/filter/OUTPUT -j limit-395 + inet6/filter/OUTPUT -j limit-395 + inet/filter/limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-152 + inet6/filter/limit-395 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-152 + inet/filter/logdrop-152 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-152 -m limit --limit 1/second -j LOG + inet/filter/logdrop-152 -j DROP + inet6/filter/logdrop-152 -j DROP + inet/filter/limit-395 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-395 -m recent --name user:C --rsource --mask fe00:: --set -Filter 282 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-275 - inet6/filter/FORWARD -j limit-275 - inet/filter/INPUT -j limit-275 - inet6/filter/INPUT -j limit-275 - inet/filter/OUTPUT -j limit-275 - inet6/filter/OUTPUT -j limit-275 - inet/filter/limit-275 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-275 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 283 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-276 - inet6/filter/FORWARD -j limit-276 - inet/filter/INPUT -j limit-276 - inet6/filter/INPUT -j limit-276 - inet/filter/OUTPUT -j limit-276 - inet6/filter/OUTPUT -j limit-276 - inet/filter/limit-276 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-276 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-10 - inet6/filter/FORWARD -j logaccept-final-10 - inet/filter/INPUT -j logaccept-final-10 - inet6/filter/INPUT -j logaccept-final-10 - inet/filter/OUTPUT -j logaccept-final-10 - inet6/filter/OUTPUT -j logaccept-final-10 - inet/filter/logaccept-final-10 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-10 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-10 -j ACCEPT - inet6/filter/logaccept-final-10 -j ACCEPT +Filter 403 {"flow-limit":{"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-396 + inet6/filter/FORWARD -j limit-396 + inet/filter/INPUT -j limit-396 + inet6/filter/INPUT -j limit-396 + inet/filter/OUTPUT -j limit-396 + inet6/filter/OUTPUT -j limit-396 + inet/filter/limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-153 + inet6/filter/limit-396 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-153 + inet/filter/logdrop-153 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-153 -m limit --limit 1/second -j LOG + inet/filter/logdrop-153 -j DROP + inet6/filter/logdrop-153 -j DROP + inet/filter/limit-396 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-396 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-6 + inet6/filter/FORWARD -j logaccept-final-6 + inet/filter/INPUT -j logaccept-final-6 + inet6/filter/INPUT -j logaccept-final-6 + inet/filter/OUTPUT -j logaccept-final-6 + inet6/filter/OUTPUT -j logaccept-final-6 + inet/filter/logaccept-final-6 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-6 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-6 -j ACCEPT + inet6/filter/logaccept-final-6 -j ACCEPT -Filter 284 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-277 - inet6/filter/FORWARD -j limit-277 - inet/filter/INPUT -j limit-277 - inet6/filter/INPUT -j limit-277 - inet/filter/OUTPUT -j limit-277 - inet6/filter/OUTPUT -j limit-277 - inet/filter/limit-277 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-277 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-277 -m limit --limit 1/second -j LOG - inet6/filter/limit-277 -m limit --limit 1/second -j LOG - -Filter 285 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-278 - inet6/filter/FORWARD -j limit-278 - inet/filter/INPUT -j limit-278 - inet6/filter/INPUT -j limit-278 - inet/filter/OUTPUT -j limit-278 - inet6/filter/OUTPUT -j limit-278 - inet/filter/limit-278 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-278 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT +Filter 404 {"action":"pass","flow-limit":{"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-397 + inet6/filter/FORWARD -j limit-397 + inet/filter/INPUT -j limit-397 + inet6/filter/INPUT -j limit-397 + inet/filter/OUTPUT -j limit-397 + inet6/filter/OUTPUT -j limit-397 + inet/filter/limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-154 + inet6/filter/limit-397 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-154 + inet/filter/logdrop-154 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-154 -m limit --limit 1/second -j LOG + inet/filter/logdrop-154 -j DROP + inet6/filter/logdrop-154 -j DROP + inet/filter/limit-397 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-397 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 286 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-279 - inet6/filter/FORWARD -j limit-279 - inet/filter/INPUT -j limit-279 - inet6/filter/INPUT -j limit-279 - inet/filter/OUTPUT -j limit-279 - inet6/filter/OUTPUT -j limit-279 - inet/filter/limit-279 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-279 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 287 {"flow-limit":{"log":"none"}} -(filter-limit) - inet/filter/FORWARD -j limit-280 - inet6/filter/FORWARD -j limit-280 - inet/filter/INPUT -j limit-280 - inet6/filter/INPUT -j limit-280 - inet/filter/OUTPUT -j limit-280 - inet6/filter/OUTPUT -j limit-280 - inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-280 -m recent --name limit-280 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-280 -m recent --name limit-280 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 405 {"flow-limit":{"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-398 + inet6/filter/FORWARD -j limit-398 + inet/filter/INPUT -j limit-398 + inet6/filter/INPUT -j limit-398 + inet/filter/OUTPUT -j limit-398 + inet6/filter/OUTPUT -j limit-398 + inet/filter/limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-155 + inet6/filter/limit-398 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-155 + inet/filter/logdrop-155 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-155 -m limit --limit 1/second -j LOG + inet/filter/logdrop-155 -j DROP + inet6/filter/logdrop-155 -j DROP + inet/filter/limit-398 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-398 -m recent --name user:C --rsource --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -3905,99 +5209,37 @@ Filter 287 {"flow-limit":{"log":"none"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 288 {"action":"pass","flow-limit":{"log":"none"}} +Filter 406 {"action":"pass","flow-limit":{"name":"C"},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-281 - inet6/filter/FORWARD -j limit-281 - inet/filter/INPUT -j limit-281 - inet6/filter/INPUT -j limit-281 - inet/filter/OUTPUT -j limit-281 - inet6/filter/OUTPUT -j limit-281 - inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-281 -m recent --name limit-281 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-281 -m recent --name limit-281 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 289 {"flow-limit":{"log":"none"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-282 - inet6/filter/FORWARD -j limit-282 - inet/filter/INPUT -j limit-282 - inet6/filter/INPUT -j limit-282 - inet/filter/OUTPUT -j limit-282 - inet6/filter/OUTPUT -j limit-282 - inet/filter/limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-282 -m recent --name limit-282 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-282 -m recent --name limit-282 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-11 - inet6/filter/FORWARD -j logaccept-final-11 - inet/filter/INPUT -j logaccept-final-11 - inet6/filter/INPUT -j logaccept-final-11 - inet/filter/OUTPUT -j logaccept-final-11 - inet6/filter/OUTPUT -j logaccept-final-11 - inet/filter/logaccept-final-11 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-11 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-11 -j ACCEPT - inet6/filter/logaccept-final-11 -j ACCEPT - -Filter 290 {"action":"pass","flow-limit":{"log":"none"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-283 - inet6/filter/FORWARD -j limit-283 - inet/filter/INPUT -j limit-283 - inet6/filter/INPUT -j limit-283 - inet/filter/OUTPUT -j limit-283 - inet6/filter/OUTPUT -j limit-283 - inet/filter/limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-283 -m recent --name limit-283 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-283 -m recent --name limit-283 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 291 {"flow-limit":{"log":"none"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-284 - inet6/filter/FORWARD -j limit-284 - inet/filter/INPUT -j limit-284 - inet6/filter/INPUT -j limit-284 - inet/filter/OUTPUT -j limit-284 - inet6/filter/OUTPUT -j limit-284 - inet/filter/limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-284 -m recent --name limit-284 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-284 -m recent --name limit-284 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT + inet/filter/FORWARD -j limit-399 + inet6/filter/FORWARD -j limit-399 + inet/filter/INPUT -j limit-399 + inet6/filter/INPUT -j limit-399 + inet/filter/OUTPUT -j limit-399 + inet6/filter/OUTPUT -j limit-399 + inet/filter/limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-156 + inet6/filter/limit-399 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-156 + inet/filter/logdrop-156 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-156 -m limit --limit 1/second -j LOG + inet/filter/logdrop-156 -j DROP + inet6/filter/logdrop-156 -j DROP + inet/filter/limit-399 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-399 -m recent --name user:C --rsource --mask fe00:: --set -Filter 292 {"action":"pass","flow-limit":{"log":"none"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-285 - inet6/filter/FORWARD -j limit-285 - inet/filter/INPUT -j limit-285 - inet6/filter/INPUT -j limit-285 - inet/filter/OUTPUT -j limit-285 - inet6/filter/OUTPUT -j limit-285 - inet/filter/limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-285 -m recent --name limit-285 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-285 -m recent --name limit-285 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 293 {"flow-limit":{"log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-286 - inet6/filter/FORWARD -j limit-286 - inet/filter/INPUT -j limit-286 - inet6/filter/INPUT -j limit-286 - inet/filter/OUTPUT -j limit-286 - inet6/filter/OUTPUT -j limit-286 - inet/filter/limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-286 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-286 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 407 {"flow-limit":{"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-400 + inet6/filter/FORWARD -j limit-400 + inet/filter/INPUT -j limit-400 + inet6/filter/INPUT -j limit-400 + inet/filter/OUTPUT -j limit-400 + inet6/filter/OUTPUT -j limit-400 + inet/filter/limit-400 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-157 + inet6/filter/limit-400 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-157 + inet/filter/logdrop-157 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-157 -m limit --limit 1/second -j LOG + inet/filter/logdrop-157 -j DROP + inet6/filter/logdrop-157 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4005,97 +5247,77 @@ Filter 293 {"flow-limit":{"log":"none","name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 294 {"action":"pass","flow-limit":{"log":"none","name":"A"}} +Filter 408 {"action":"pass","flow-limit":{"name":"C","update":false}} (filter-limit) - inet/filter/FORWARD -j limit-287 - inet6/filter/FORWARD -j limit-287 - inet/filter/INPUT -j limit-287 - inet6/filter/INPUT -j limit-287 - inet/filter/OUTPUT -j limit-287 - inet6/filter/OUTPUT -j limit-287 - inet/filter/limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-287 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-287 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-401 + inet6/filter/FORWARD -j limit-401 + inet/filter/INPUT -j limit-401 + inet6/filter/INPUT -j limit-401 + inet/filter/OUTPUT -j limit-401 + inet6/filter/OUTPUT -j limit-401 + inet/filter/limit-401 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-158 + inet6/filter/limit-401 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-158 + inet/filter/logdrop-158 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-158 -m limit --limit 1/second -j LOG + inet/filter/logdrop-158 -j DROP + inet6/filter/logdrop-158 -j DROP -Filter 295 {"flow-limit":{"log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-288 - inet6/filter/FORWARD -j limit-288 - inet/filter/INPUT -j limit-288 - inet6/filter/INPUT -j limit-288 - inet/filter/OUTPUT -j limit-288 - inet6/filter/OUTPUT -j limit-288 - inet/filter/limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-288 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-288 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-12 - inet6/filter/FORWARD -j logaccept-final-12 - inet/filter/INPUT -j logaccept-final-12 - inet6/filter/INPUT -j logaccept-final-12 - inet/filter/OUTPUT -j logaccept-final-12 - inet6/filter/OUTPUT -j logaccept-final-12 - inet/filter/logaccept-final-12 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-12 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-12 -j ACCEPT - inet6/filter/logaccept-final-12 -j ACCEPT +Filter 409 {"flow-limit":{"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-402 + inet6/filter/FORWARD -j limit-402 + inet/filter/INPUT -j limit-402 + inet6/filter/INPUT -j limit-402 + inet/filter/OUTPUT -j limit-402 + inet6/filter/OUTPUT -j limit-402 + inet/filter/limit-402 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-159 + inet6/filter/limit-402 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-159 + inet/filter/logdrop-159 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-159 -m limit --limit 1/second -j LOG + inet/filter/logdrop-159 -j DROP + inet6/filter/logdrop-159 -j DROP + inet/filter/FORWARD -j logaccept-final-7 + inet6/filter/FORWARD -j logaccept-final-7 + inet/filter/INPUT -j logaccept-final-7 + inet6/filter/INPUT -j logaccept-final-7 + inet/filter/OUTPUT -j logaccept-final-7 + inet6/filter/OUTPUT -j logaccept-final-7 + inet/filter/logaccept-final-7 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-7 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-7 -j ACCEPT + inet6/filter/logaccept-final-7 -j ACCEPT -Filter 296 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-289 - inet6/filter/FORWARD -j limit-289 - inet/filter/INPUT -j limit-289 - inet6/filter/INPUT -j limit-289 - inet/filter/OUTPUT -j limit-289 - inet6/filter/OUTPUT -j limit-289 - inet/filter/limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-289 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-289 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 297 {"flow-limit":{"log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-290 - inet6/filter/FORWARD -j limit-290 - inet/filter/INPUT -j limit-290 - inet6/filter/INPUT -j limit-290 - inet/filter/OUTPUT -j limit-290 - inet6/filter/OUTPUT -j limit-290 - inet/filter/limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-290 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-290 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT +Filter 410 {"action":"pass","flow-limit":{"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-403 + inet6/filter/FORWARD -j limit-403 + inet/filter/INPUT -j limit-403 + inet6/filter/INPUT -j limit-403 + inet/filter/OUTPUT -j limit-403 + inet6/filter/OUTPUT -j limit-403 + inet/filter/limit-403 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-160 + inet6/filter/limit-403 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-160 + inet/filter/logdrop-160 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-160 -m limit --limit 1/second -j LOG + inet/filter/logdrop-160 -j DROP + inet6/filter/logdrop-160 -j DROP + inet/filter/limit-403 -m limit --limit 1/second -j LOG + inet6/filter/limit-403 -m limit --limit 1/second -j LOG -Filter 298 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-291 - inet6/filter/FORWARD -j limit-291 - inet/filter/INPUT -j limit-291 - inet6/filter/INPUT -j limit-291 - inet/filter/OUTPUT -j limit-291 - inet6/filter/OUTPUT -j limit-291 - inet/filter/limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-291 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-291 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 299 {"flow-limit":{"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-292 - inet6/filter/FORWARD -j limit-292 - inet/filter/INPUT -j limit-292 - inet6/filter/INPUT -j limit-292 - inet/filter/OUTPUT -j limit-292 - inet6/filter/OUTPUT -j limit-292 - inet/filter/limit-292 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-292 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 411 {"flow-limit":{"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-404 + inet6/filter/FORWARD -j limit-404 + inet/filter/INPUT -j limit-404 + inet6/filter/INPUT -j limit-404 + inet/filter/OUTPUT -j limit-404 + inet6/filter/OUTPUT -j limit-404 + inet/filter/limit-404 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-161 + inet6/filter/limit-404 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-161 + inet/filter/logdrop-161 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-161 -m limit --limit 1/second -j LOG + inet/filter/logdrop-161 -j DROP + inet6/filter/logdrop-161 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4103,61 +5325,37 @@ Filter 299 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 300 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-293 - inet6/filter/FORWARD -j limit-293 - inet/filter/INPUT -j limit-293 - inet6/filter/INPUT -j limit-293 - inet/filter/OUTPUT -j limit-293 - inet6/filter/OUTPUT -j limit-293 - inet/filter/limit-293 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-293 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 301 {"flow-limit":{"log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-294 - inet6/filter/FORWARD -j limit-294 - inet/filter/INPUT -j limit-294 - inet6/filter/INPUT -j limit-294 - inet/filter/OUTPUT -j limit-294 - inet6/filter/OUTPUT -j limit-294 - inet/filter/limit-294 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-294 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-13 - inet6/filter/FORWARD -j logaccept-final-13 - inet/filter/INPUT -j logaccept-final-13 - inet6/filter/INPUT -j logaccept-final-13 - inet/filter/OUTPUT -j logaccept-final-13 - inet6/filter/OUTPUT -j logaccept-final-13 - inet/filter/logaccept-final-13 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-13 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-13 -j ACCEPT - inet6/filter/logaccept-final-13 -j ACCEPT +Filter 412 {"action":"pass","flow-limit":{"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-405 + inet6/filter/FORWARD -j limit-405 + inet/filter/INPUT -j limit-405 + inet6/filter/INPUT -j limit-405 + inet/filter/OUTPUT -j limit-405 + inet6/filter/OUTPUT -j limit-405 + inet/filter/limit-405 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-162 + inet6/filter/limit-405 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-162 + inet/filter/logdrop-162 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-162 -m limit --limit 1/second -j LOG + inet/filter/logdrop-162 -j DROP + inet6/filter/logdrop-162 -j DROP -Filter 302 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-295 - inet6/filter/FORWARD -j limit-295 - inet/filter/INPUT -j limit-295 - inet6/filter/INPUT -j limit-295 - inet/filter/OUTPUT -j limit-295 - inet6/filter/OUTPUT -j limit-295 - inet/filter/limit-295 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-295 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-295 -m limit --limit 1/second -j LOG - inet6/filter/limit-295 -m limit --limit 1/second -j LOG - -Filter 303 {"flow-limit":{"log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-296 - inet6/filter/FORWARD -j limit-296 - inet/filter/INPUT -j limit-296 - inet6/filter/INPUT -j limit-296 - inet/filter/OUTPUT -j limit-296 - inet6/filter/OUTPUT -j limit-296 - inet/filter/limit-296 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-296 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 413 {"flow-limit":{"addr":"dest","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-406 + inet6/filter/FORWARD -j limit-406 + inet/filter/INPUT -j limit-406 + inet6/filter/INPUT -j limit-406 + inet/filter/OUTPUT -j limit-406 + inet6/filter/OUTPUT -j limit-406 + inet/filter/limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-163 + inet6/filter/limit-406 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-163 + inet/filter/logdrop-163 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-163 -m limit --limit 1/second -j LOG + inet/filter/logdrop-163 -j DROP + inet6/filter/logdrop-163 -j DROP + inet/filter/limit-406 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-406 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4165,97 +5363,83 @@ Filter 303 {"flow-limit":{"log":"none","name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 304 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-297 - inet6/filter/FORWARD -j limit-297 - inet/filter/INPUT -j limit-297 - inet6/filter/INPUT -j limit-297 - inet/filter/OUTPUT -j limit-297 - inet6/filter/OUTPUT -j limit-297 - inet/filter/limit-297 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-297 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 305 {"flow-limit":{"addr":"dest","log":"none","name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-298 - inet6/filter/FORWARD -j limit-298 - inet/filter/INPUT -j limit-298 - inet6/filter/INPUT -j limit-298 - inet/filter/OUTPUT -j limit-298 - inet6/filter/OUTPUT -j limit-298 - inet/filter/limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-298 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-298 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j ACCEPT - inet6/filter/FORWARD -j ACCEPT - inet/filter/INPUT -j ACCEPT - inet6/filter/INPUT -j ACCEPT - inet/filter/OUTPUT -j ACCEPT - inet6/filter/OUTPUT -j ACCEPT +Filter 414 {"action":"pass","flow-limit":{"addr":"dest","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-407 + inet6/filter/FORWARD -j limit-407 + inet/filter/INPUT -j limit-407 + inet6/filter/INPUT -j limit-407 + inet/filter/OUTPUT -j limit-407 + inet6/filter/OUTPUT -j limit-407 + inet/filter/limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-164 + inet6/filter/limit-407 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-164 + inet/filter/logdrop-164 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-164 -m limit --limit 1/second -j LOG + inet/filter/logdrop-164 -j DROP + inet6/filter/logdrop-164 -j DROP + inet/filter/limit-407 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-407 -m recent --name user:C --rdest --mask fe00:: --set -Filter 306 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"}} +Filter 415 {"flow-limit":{"addr":"dest","name":"C"},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-299 - inet6/filter/FORWARD -j limit-299 - inet/filter/INPUT -j limit-299 - inet6/filter/INPUT -j limit-299 - inet/filter/OUTPUT -j limit-299 - inet6/filter/OUTPUT -j limit-299 - inet/filter/limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-299 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-299 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-408 + inet6/filter/FORWARD -j limit-408 + inet/filter/INPUT -j limit-408 + inet6/filter/INPUT -j limit-408 + inet/filter/OUTPUT -j limit-408 + inet6/filter/OUTPUT -j limit-408 + inet/filter/limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-165 + inet6/filter/limit-408 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-165 + inet/filter/logdrop-165 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-165 -m limit --limit 1/second -j LOG + inet/filter/logdrop-165 -j DROP + inet6/filter/logdrop-165 -j DROP + inet/filter/limit-408 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-408 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-8 + inet6/filter/FORWARD -j logaccept-final-8 + inet/filter/INPUT -j logaccept-final-8 + inet6/filter/INPUT -j logaccept-final-8 + inet/filter/OUTPUT -j logaccept-final-8 + inet6/filter/OUTPUT -j logaccept-final-8 + inet/filter/logaccept-final-8 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-8 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-8 -j ACCEPT + inet6/filter/logaccept-final-8 -j ACCEPT -Filter 307 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-300 - inet6/filter/FORWARD -j limit-300 - inet/filter/INPUT -j limit-300 - inet6/filter/INPUT -j limit-300 - inet/filter/OUTPUT -j limit-300 - inet6/filter/OUTPUT -j limit-300 - inet/filter/limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-300 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-300 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-14 - inet6/filter/FORWARD -j logaccept-final-14 - inet/filter/INPUT -j logaccept-final-14 - inet6/filter/INPUT -j logaccept-final-14 - inet/filter/OUTPUT -j logaccept-final-14 - inet6/filter/OUTPUT -j logaccept-final-14 - inet/filter/logaccept-final-14 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-14 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-14 -j ACCEPT - inet6/filter/logaccept-final-14 -j ACCEPT +Filter 416 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-409 + inet6/filter/FORWARD -j limit-409 + inet/filter/INPUT -j limit-409 + inet6/filter/INPUT -j limit-409 + inet/filter/OUTPUT -j limit-409 + inet6/filter/OUTPUT -j limit-409 + inet/filter/limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-166 + inet6/filter/limit-409 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-166 + inet/filter/logdrop-166 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-166 -m limit --limit 1/second -j LOG + inet/filter/logdrop-166 -j DROP + inet6/filter/logdrop-166 -j DROP + inet/filter/limit-409 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-409 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG -Filter 308 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-301 - inet6/filter/FORWARD -j limit-301 - inet/filter/INPUT -j limit-301 - inet6/filter/INPUT -j limit-301 - inet/filter/OUTPUT -j limit-301 - inet6/filter/OUTPUT -j limit-301 - inet/filter/limit-301 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-301 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-301 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 309 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-302 - inet6/filter/FORWARD -j limit-302 - inet/filter/INPUT -j limit-302 - inet6/filter/INPUT -j limit-302 - inet/filter/OUTPUT -j limit-302 - inet6/filter/OUTPUT -j limit-302 - inet/filter/limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-302 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-302 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 417 {"flow-limit":{"addr":"dest","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-410 + inet6/filter/FORWARD -j limit-410 + inet/filter/INPUT -j limit-410 + inet6/filter/INPUT -j limit-410 + inet/filter/OUTPUT -j limit-410 + inet6/filter/OUTPUT -j limit-410 + inet/filter/limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-167 + inet6/filter/limit-410 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-167 + inet/filter/logdrop-167 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-167 -m limit --limit 1/second -j LOG + inet/filter/logdrop-167 -j DROP + inet6/filter/logdrop-167 -j DROP + inet/filter/limit-410 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-410 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4263,29 +5447,37 @@ Filter 309 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 310 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-303 - inet6/filter/FORWARD -j limit-303 - inet/filter/INPUT -j limit-303 - inet6/filter/INPUT -j limit-303 - inet/filter/OUTPUT -j limit-303 - inet6/filter/OUTPUT -j limit-303 - inet/filter/limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-303 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-303 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 311 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-304 - inet6/filter/FORWARD -j limit-304 - inet/filter/INPUT -j limit-304 - inet6/filter/INPUT -j limit-304 - inet/filter/OUTPUT -j limit-304 - inet6/filter/OUTPUT -j limit-304 - inet/filter/limit-304 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-304 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 418 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-411 + inet6/filter/FORWARD -j limit-411 + inet/filter/INPUT -j limit-411 + inet6/filter/INPUT -j limit-411 + inet/filter/OUTPUT -j limit-411 + inet6/filter/OUTPUT -j limit-411 + inet/filter/limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-168 + inet6/filter/limit-411 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-168 + inet/filter/logdrop-168 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-168 -m limit --limit 1/second -j LOG + inet/filter/logdrop-168 -j DROP + inet6/filter/logdrop-168 -j DROP + inet/filter/limit-411 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-411 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 419 {"flow-limit":{"addr":"dest","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-412 + inet6/filter/FORWARD -j limit-412 + inet/filter/INPUT -j limit-412 + inet6/filter/INPUT -j limit-412 + inet/filter/OUTPUT -j limit-412 + inet6/filter/OUTPUT -j limit-412 + inet/filter/limit-412 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-169 + inet6/filter/limit-412 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-169 + inet/filter/logdrop-169 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-169 -m limit --limit 1/second -j LOG + inet/filter/logdrop-169 -j DROP + inet6/filter/logdrop-169 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4293,61 +5485,77 @@ Filter 311 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 312 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-305 - inet6/filter/FORWARD -j limit-305 - inet/filter/INPUT -j limit-305 - inet6/filter/INPUT -j limit-305 - inet/filter/OUTPUT -j limit-305 - inet6/filter/OUTPUT -j limit-305 - inet/filter/limit-305 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-305 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 313 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-306 - inet6/filter/FORWARD -j limit-306 - inet/filter/INPUT -j limit-306 - inet6/filter/INPUT -j limit-306 - inet/filter/OUTPUT -j limit-306 - inet6/filter/OUTPUT -j limit-306 - inet/filter/limit-306 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-306 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/FORWARD -j logaccept-final-15 - inet6/filter/FORWARD -j logaccept-final-15 - inet/filter/INPUT -j logaccept-final-15 - inet6/filter/INPUT -j logaccept-final-15 - inet/filter/OUTPUT -j logaccept-final-15 - inet6/filter/OUTPUT -j logaccept-final-15 - inet/filter/logaccept-final-15 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-15 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-15 -j ACCEPT - inet6/filter/logaccept-final-15 -j ACCEPT +Filter 420 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-413 + inet6/filter/FORWARD -j limit-413 + inet/filter/INPUT -j limit-413 + inet6/filter/INPUT -j limit-413 + inet/filter/OUTPUT -j limit-413 + inet6/filter/OUTPUT -j limit-413 + inet/filter/limit-413 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-170 + inet6/filter/limit-413 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-170 + inet/filter/logdrop-170 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-170 -m limit --limit 1/second -j LOG + inet/filter/logdrop-170 -j DROP + inet6/filter/logdrop-170 -j DROP + +Filter 421 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-414 + inet6/filter/FORWARD -j limit-414 + inet/filter/INPUT -j limit-414 + inet6/filter/INPUT -j limit-414 + inet/filter/OUTPUT -j limit-414 + inet6/filter/OUTPUT -j limit-414 + inet/filter/limit-414 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-171 + inet6/filter/limit-414 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-171 + inet/filter/logdrop-171 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-171 -m limit --limit 1/second -j LOG + inet/filter/logdrop-171 -j DROP + inet6/filter/logdrop-171 -j DROP + inet/filter/FORWARD -j logaccept-final-9 + inet6/filter/FORWARD -j logaccept-final-9 + inet/filter/INPUT -j logaccept-final-9 + inet6/filter/INPUT -j logaccept-final-9 + inet/filter/OUTPUT -j logaccept-final-9 + inet6/filter/OUTPUT -j logaccept-final-9 + inet/filter/logaccept-final-9 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-9 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-9 -j ACCEPT + inet6/filter/logaccept-final-9 -j ACCEPT + +Filter 422 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-415 + inet6/filter/FORWARD -j limit-415 + inet/filter/INPUT -j limit-415 + inet6/filter/INPUT -j limit-415 + inet/filter/OUTPUT -j limit-415 + inet6/filter/OUTPUT -j limit-415 + inet/filter/limit-415 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-172 + inet6/filter/limit-415 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-172 + inet/filter/logdrop-172 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-172 -m limit --limit 1/second -j LOG + inet/filter/logdrop-172 -j DROP + inet6/filter/logdrop-172 -j DROP + inet/filter/limit-415 -m limit --limit 1/second -j LOG + inet6/filter/limit-415 -m limit --limit 1/second -j LOG -Filter 314 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-307 - inet6/filter/FORWARD -j limit-307 - inet/filter/INPUT -j limit-307 - inet6/filter/INPUT -j limit-307 - inet/filter/OUTPUT -j limit-307 - inet6/filter/OUTPUT -j limit-307 - inet/filter/limit-307 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-307 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - inet/filter/limit-307 -m limit --limit 1/second -j LOG - inet6/filter/limit-307 -m limit --limit 1/second -j LOG - -Filter 315 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-308 - inet6/filter/FORWARD -j limit-308 - inet/filter/INPUT -j limit-308 - inet6/filter/INPUT -j limit-308 - inet/filter/OUTPUT -j limit-308 - inet6/filter/OUTPUT -j limit-308 - inet/filter/limit-308 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-308 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP +Filter 423 {"flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-416 + inet6/filter/FORWARD -j limit-416 + inet/filter/INPUT -j limit-416 + inet6/filter/INPUT -j limit-416 + inet/filter/OUTPUT -j limit-416 + inet6/filter/OUTPUT -j limit-416 + inet/filter/limit-416 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-173 + inet6/filter/limit-416 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-173 + inet/filter/logdrop-173 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-173 -m limit --limit 1/second -j LOG + inet/filter/logdrop-173 -j DROP + inet6/filter/logdrop-173 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4355,33 +5563,33 @@ Filter 315 {"flow-limit":{"addr":"dest","log":"none","na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 316 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-309 - inet6/filter/FORWARD -j limit-309 - inet/filter/INPUT -j limit-309 - inet6/filter/INPUT -j limit-309 - inet/filter/OUTPUT -j limit-309 - inet6/filter/OUTPUT -j limit-309 - inet/filter/limit-309 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP - inet6/filter/limit-309 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP - -Filter 317 {"flow-limit":{"interval":5}} -(filter-limit) - inet/filter/FORWARD -j limit-310 - inet6/filter/FORWARD -j limit-310 - inet/filter/INPUT -j limit-310 - inet6/filter/INPUT -j limit-310 - inet/filter/OUTPUT -j limit-310 - inet6/filter/OUTPUT -j limit-310 - inet/filter/limit-310 -m recent --name limit-310 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-103 - inet6/filter/limit-310 -m recent --name limit-310 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-103 - inet/filter/logdrop-103 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-103 -m limit --limit 1/second -j LOG - inet/filter/logdrop-103 -j DROP - inet6/filter/logdrop-103 -j DROP - inet/filter/limit-310 -m recent --name limit-310 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-310 -m recent --name limit-310 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 424 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-417 + inet6/filter/FORWARD -j limit-417 + inet/filter/INPUT -j limit-417 + inet6/filter/INPUT -j limit-417 + inet/filter/OUTPUT -j limit-417 + inet6/filter/OUTPUT -j limit-417 + inet/filter/limit-417 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-174 + inet6/filter/limit-417 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-174 + inet/filter/logdrop-174 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-174 -m limit --limit 1/second -j LOG + inet/filter/logdrop-174 -j DROP + inet6/filter/logdrop-174 -j DROP + +Filter 425 {"flow-limit":{"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-418 + inet6/filter/FORWARD -j limit-418 + inet/filter/INPUT -j limit-418 + inet6/filter/INPUT -j limit-418 + inet/filter/OUTPUT -j limit-418 + inet6/filter/OUTPUT -j limit-418 + inet/filter/limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-418 -m recent --name limit-418 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-418 -m recent --name limit-418 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4389,83 +5597,67 @@ Filter 317 {"flow-limit":{"interval":5}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 318 {"action":"pass","flow-limit":{"interval":5}} +Filter 426 {"action":"pass","flow-limit":{"log":false}} (filter-limit) - inet/filter/FORWARD -j limit-311 - inet6/filter/FORWARD -j limit-311 - inet/filter/INPUT -j limit-311 - inet6/filter/INPUT -j limit-311 - inet/filter/OUTPUT -j limit-311 - inet6/filter/OUTPUT -j limit-311 - inet/filter/limit-311 -m recent --name limit-311 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-104 - inet6/filter/limit-311 -m recent --name limit-311 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-104 - inet/filter/logdrop-104 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-104 -m limit --limit 1/second -j LOG - inet/filter/logdrop-104 -j DROP - inet6/filter/logdrop-104 -j DROP - inet/filter/limit-311 -m recent --name limit-311 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-311 -m recent --name limit-311 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 319 {"flow-limit":{"interval":5},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-312 - inet6/filter/FORWARD -j limit-312 - inet/filter/INPUT -j limit-312 - inet6/filter/INPUT -j limit-312 - inet/filter/OUTPUT -j limit-312 - inet6/filter/OUTPUT -j limit-312 - inet/filter/limit-312 -m recent --name limit-312 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-105 - inet6/filter/limit-312 -m recent --name limit-312 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-105 - inet/filter/logdrop-105 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-105 -m limit --limit 1/second -j LOG - inet/filter/logdrop-105 -j DROP - inet6/filter/logdrop-105 -j DROP - inet/filter/limit-312 -m recent --name limit-312 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-312 -m recent --name limit-312 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - inet/filter/FORWARD -j logaccept-final-16 - inet6/filter/FORWARD -j logaccept-final-16 - inet/filter/INPUT -j logaccept-final-16 - inet6/filter/INPUT -j logaccept-final-16 - inet/filter/OUTPUT -j logaccept-final-16 - inet6/filter/OUTPUT -j logaccept-final-16 - inet/filter/logaccept-final-16 -m limit --limit 1/second -j LOG - inet6/filter/logaccept-final-16 -m limit --limit 1/second -j LOG - inet/filter/logaccept-final-16 -j ACCEPT - inet6/filter/logaccept-final-16 -j ACCEPT + inet/filter/FORWARD -j limit-419 + inet6/filter/FORWARD -j limit-419 + inet/filter/INPUT -j limit-419 + inet6/filter/INPUT -j limit-419 + inet/filter/OUTPUT -j limit-419 + inet6/filter/OUTPUT -j limit-419 + inet/filter/limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-419 -m recent --name limit-419 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-419 -m recent --name limit-419 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -Filter 320 {"action":"pass","flow-limit":{"interval":5},"log":true} +Filter 427 {"flow-limit":{"log":false},"log":true} (filter-limit) - inet/filter/FORWARD -j limit-313 - inet6/filter/FORWARD -j limit-313 - inet/filter/INPUT -j limit-313 - inet6/filter/INPUT -j limit-313 - inet/filter/OUTPUT -j limit-313 - inet6/filter/OUTPUT -j limit-313 - inet/filter/limit-313 -m recent --name limit-313 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-106 - inet6/filter/limit-313 -m recent --name limit-313 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-106 - inet/filter/logdrop-106 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-106 -m limit --limit 1/second -j LOG - inet/filter/logdrop-106 -j DROP - inet6/filter/logdrop-106 -j DROP - inet/filter/limit-313 -m recent --name limit-313 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-313 -m recent --name limit-313 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 321 {"flow-limit":{"interval":5},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-314 - inet6/filter/FORWARD -j limit-314 - inet/filter/INPUT -j limit-314 - inet6/filter/INPUT -j limit-314 - inet/filter/OUTPUT -j limit-314 - inet6/filter/OUTPUT -j limit-314 - inet/filter/limit-314 -m recent --name limit-314 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-107 - inet6/filter/limit-314 -m recent --name limit-314 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-107 - inet/filter/logdrop-107 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-107 -m limit --limit 1/second -j LOG - inet/filter/logdrop-107 -j DROP - inet6/filter/logdrop-107 -j DROP - inet/filter/limit-314 -m recent --name limit-314 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-314 -m recent --name limit-314 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-420 + inet6/filter/FORWARD -j limit-420 + inet/filter/INPUT -j limit-420 + inet6/filter/INPUT -j limit-420 + inet/filter/OUTPUT -j limit-420 + inet6/filter/OUTPUT -j limit-420 + inet/filter/limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-420 -m recent --name limit-420 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-420 -m recent --name limit-420 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-10 + inet6/filter/FORWARD -j logaccept-final-10 + inet/filter/INPUT -j logaccept-final-10 + inet6/filter/INPUT -j logaccept-final-10 + inet/filter/OUTPUT -j logaccept-final-10 + inet6/filter/OUTPUT -j logaccept-final-10 + inet/filter/logaccept-final-10 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-10 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-10 -j ACCEPT + inet6/filter/logaccept-final-10 -j ACCEPT + +Filter 428 {"action":"pass","flow-limit":{"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-421 + inet6/filter/FORWARD -j limit-421 + inet/filter/INPUT -j limit-421 + inet6/filter/INPUT -j limit-421 + inet/filter/OUTPUT -j limit-421 + inet6/filter/OUTPUT -j limit-421 + inet/filter/limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-421 -m recent --name limit-421 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-421 -m recent --name limit-421 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 429 {"flow-limit":{"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-422 + inet6/filter/FORWARD -j limit-422 + inet/filter/INPUT -j limit-422 + inet6/filter/INPUT -j limit-422 + inet/filter/OUTPUT -j limit-422 + inet6/filter/OUTPUT -j limit-422 + inet/filter/limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-422 -m recent --name limit-422 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-422 -m recent --name limit-422 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4473,39 +5665,31 @@ Filter 321 {"flow-limit":{"interval":5},"log":"none"} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 322 {"action":"pass","flow-limit":{"interval":5},"log":"none"} +Filter 430 {"action":"pass","flow-limit":{"log":false},"log":"none"} (filter-limit) - inet/filter/FORWARD -j limit-315 - inet6/filter/FORWARD -j limit-315 - inet/filter/INPUT -j limit-315 - inet6/filter/INPUT -j limit-315 - inet/filter/OUTPUT -j limit-315 - inet6/filter/OUTPUT -j limit-315 - inet/filter/limit-315 -m recent --name limit-315 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-108 - inet6/filter/limit-315 -m recent --name limit-315 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-108 - inet/filter/logdrop-108 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-108 -m limit --limit 1/second -j LOG - inet/filter/logdrop-108 -j DROP - inet6/filter/logdrop-108 -j DROP - inet/filter/limit-315 -m recent --name limit-315 --rsource --mask 255.255.255.255 --set - inet6/filter/limit-315 -m recent --name limit-315 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 323 {"flow-limit":{"interval":5,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-316 - inet6/filter/FORWARD -j limit-316 - inet/filter/INPUT -j limit-316 - inet6/filter/INPUT -j limit-316 - inet/filter/OUTPUT -j limit-316 - inet6/filter/OUTPUT -j limit-316 - inet/filter/limit-316 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-109 - inet6/filter/limit-316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-109 - inet/filter/logdrop-109 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-109 -m limit --limit 1/second -j LOG - inet/filter/logdrop-109 -j DROP - inet6/filter/logdrop-109 -j DROP - inet/filter/limit-316 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-316 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j limit-423 + inet6/filter/FORWARD -j limit-423 + inet/filter/INPUT -j limit-423 + inet6/filter/INPUT -j limit-423 + inet/filter/OUTPUT -j limit-423 + inet6/filter/OUTPUT -j limit-423 + inet/filter/limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-423 -m recent --name limit-423 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-423 -m recent --name limit-423 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 431 {"flow-limit":{"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-424 + inet6/filter/FORWARD -j limit-424 + inet/filter/INPUT -j limit-424 + inet6/filter/INPUT -j limit-424 + inet/filter/OUTPUT -j limit-424 + inet6/filter/OUTPUT -j limit-424 + inet/filter/limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-424 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-424 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4513,39 +5697,601 @@ Filter 323 {"flow-limit":{"interval":5,"name":"A"}} inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 324 {"action":"pass","flow-limit":{"interval":5,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-317 - inet6/filter/FORWARD -j limit-317 - inet/filter/INPUT -j limit-317 - inet6/filter/INPUT -j limit-317 - inet/filter/OUTPUT -j limit-317 - inet6/filter/OUTPUT -j limit-317 - inet/filter/limit-317 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-110 - inet6/filter/limit-317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-110 - inet/filter/logdrop-110 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-110 -m limit --limit 1/second -j LOG - inet/filter/logdrop-110 -j DROP - inet6/filter/logdrop-110 -j DROP - inet/filter/limit-317 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-317 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 325 {"flow-limit":{"interval":5,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-318 - inet6/filter/FORWARD -j limit-318 - inet/filter/INPUT -j limit-318 - inet6/filter/INPUT -j limit-318 - inet/filter/OUTPUT -j limit-318 - inet6/filter/OUTPUT -j limit-318 - inet/filter/limit-318 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-111 - inet6/filter/limit-318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-111 - inet/filter/logdrop-111 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-111 -m limit --limit 1/second -j LOG - inet/filter/logdrop-111 -j DROP - inet6/filter/logdrop-111 -j DROP - inet/filter/limit-318 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-318 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 432 {"action":"pass","flow-limit":{"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-425 + inet6/filter/FORWARD -j limit-425 + inet/filter/INPUT -j limit-425 + inet6/filter/INPUT -j limit-425 + inet/filter/OUTPUT -j limit-425 + inet6/filter/OUTPUT -j limit-425 + inet/filter/limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-425 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-425 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 433 {"flow-limit":{"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-426 + inet6/filter/FORWARD -j limit-426 + inet/filter/INPUT -j limit-426 + inet6/filter/INPUT -j limit-426 + inet/filter/OUTPUT -j limit-426 + inet6/filter/OUTPUT -j limit-426 + inet/filter/limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-426 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-426 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-11 + inet6/filter/FORWARD -j logaccept-final-11 + inet/filter/INPUT -j logaccept-final-11 + inet6/filter/INPUT -j logaccept-final-11 + inet/filter/OUTPUT -j logaccept-final-11 + inet6/filter/OUTPUT -j logaccept-final-11 + inet/filter/logaccept-final-11 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-11 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-11 -j ACCEPT + inet6/filter/logaccept-final-11 -j ACCEPT + +Filter 434 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-427 + inet6/filter/FORWARD -j limit-427 + inet/filter/INPUT -j limit-427 + inet6/filter/INPUT -j limit-427 + inet/filter/OUTPUT -j limit-427 + inet6/filter/OUTPUT -j limit-427 + inet/filter/limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-427 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-427 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 435 {"flow-limit":{"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-428 + inet6/filter/FORWARD -j limit-428 + inet/filter/INPUT -j limit-428 + inet6/filter/INPUT -j limit-428 + inet/filter/OUTPUT -j limit-428 + inet6/filter/OUTPUT -j limit-428 + inet/filter/limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-428 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-428 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 436 {"action":"pass","flow-limit":{"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-429 + inet6/filter/FORWARD -j limit-429 + inet/filter/INPUT -j limit-429 + inet6/filter/INPUT -j limit-429 + inet/filter/OUTPUT -j limit-429 + inet6/filter/OUTPUT -j limit-429 + inet/filter/limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-429 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-429 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 437 {"flow-limit":{"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-430 + inet6/filter/FORWARD -j limit-430 + inet/filter/INPUT -j limit-430 + inet6/filter/INPUT -j limit-430 + inet/filter/OUTPUT -j limit-430 + inet6/filter/OUTPUT -j limit-430 + inet/filter/limit-430 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-430 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 438 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-431 + inet6/filter/FORWARD -j limit-431 + inet/filter/INPUT -j limit-431 + inet6/filter/INPUT -j limit-431 + inet/filter/OUTPUT -j limit-431 + inet6/filter/OUTPUT -j limit-431 + inet/filter/limit-431 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-431 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 439 {"flow-limit":{"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-432 + inet6/filter/FORWARD -j limit-432 + inet/filter/INPUT -j limit-432 + inet6/filter/INPUT -j limit-432 + inet/filter/OUTPUT -j limit-432 + inet6/filter/OUTPUT -j limit-432 + inet/filter/limit-432 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-432 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-12 + inet6/filter/FORWARD -j logaccept-final-12 + inet/filter/INPUT -j logaccept-final-12 + inet6/filter/INPUT -j logaccept-final-12 + inet/filter/OUTPUT -j logaccept-final-12 + inet6/filter/OUTPUT -j logaccept-final-12 + inet/filter/logaccept-final-12 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-12 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-12 -j ACCEPT + inet6/filter/logaccept-final-12 -j ACCEPT + +Filter 440 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-433 + inet6/filter/FORWARD -j limit-433 + inet/filter/INPUT -j limit-433 + inet6/filter/INPUT -j limit-433 + inet/filter/OUTPUT -j limit-433 + inet6/filter/OUTPUT -j limit-433 + inet/filter/limit-433 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-433 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-433 -m limit --limit 1/second -j LOG + inet6/filter/limit-433 -m limit --limit 1/second -j LOG + +Filter 441 {"flow-limit":{"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-434 + inet6/filter/FORWARD -j limit-434 + inet/filter/INPUT -j limit-434 + inet6/filter/INPUT -j limit-434 + inet/filter/OUTPUT -j limit-434 + inet6/filter/OUTPUT -j limit-434 + inet/filter/limit-434 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-434 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 442 {"action":"pass","flow-limit":{"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-435 + inet6/filter/FORWARD -j limit-435 + inet/filter/INPUT -j limit-435 + inet6/filter/INPUT -j limit-435 + inet/filter/OUTPUT -j limit-435 + inet6/filter/OUTPUT -j limit-435 + inet/filter/limit-435 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-435 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 443 {"flow-limit":{"addr":"dest","log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-436 + inet6/filter/FORWARD -j limit-436 + inet/filter/INPUT -j limit-436 + inet6/filter/INPUT -j limit-436 + inet/filter/OUTPUT -j limit-436 + inet6/filter/OUTPUT -j limit-436 + inet/filter/limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-436 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-436 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 444 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-437 + inet6/filter/FORWARD -j limit-437 + inet/filter/INPUT -j limit-437 + inet6/filter/INPUT -j limit-437 + inet/filter/OUTPUT -j limit-437 + inet6/filter/OUTPUT -j limit-437 + inet/filter/limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-437 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-437 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 445 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-438 + inet6/filter/FORWARD -j limit-438 + inet/filter/INPUT -j limit-438 + inet6/filter/INPUT -j limit-438 + inet/filter/OUTPUT -j limit-438 + inet6/filter/OUTPUT -j limit-438 + inet/filter/limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-438 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-438 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-13 + inet6/filter/FORWARD -j logaccept-final-13 + inet/filter/INPUT -j logaccept-final-13 + inet6/filter/INPUT -j logaccept-final-13 + inet/filter/OUTPUT -j logaccept-final-13 + inet6/filter/OUTPUT -j logaccept-final-13 + inet/filter/logaccept-final-13 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-13 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-13 -j ACCEPT + inet6/filter/logaccept-final-13 -j ACCEPT + +Filter 446 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-439 + inet6/filter/FORWARD -j limit-439 + inet/filter/INPUT -j limit-439 + inet6/filter/INPUT -j limit-439 + inet/filter/OUTPUT -j limit-439 + inet6/filter/OUTPUT -j limit-439 + inet/filter/limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-439 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-439 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 447 {"flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-440 + inet6/filter/FORWARD -j limit-440 + inet/filter/INPUT -j limit-440 + inet6/filter/INPUT -j limit-440 + inet/filter/OUTPUT -j limit-440 + inet6/filter/OUTPUT -j limit-440 + inet/filter/limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-440 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-440 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 448 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-441 + inet6/filter/FORWARD -j limit-441 + inet/filter/INPUT -j limit-441 + inet6/filter/INPUT -j limit-441 + inet/filter/OUTPUT -j limit-441 + inet6/filter/OUTPUT -j limit-441 + inet/filter/limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-441 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-441 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 449 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-442 + inet6/filter/FORWARD -j limit-442 + inet/filter/INPUT -j limit-442 + inet6/filter/INPUT -j limit-442 + inet/filter/OUTPUT -j limit-442 + inet6/filter/OUTPUT -j limit-442 + inet/filter/limit-442 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-442 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 450 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-443 + inet6/filter/FORWARD -j limit-443 + inet/filter/INPUT -j limit-443 + inet6/filter/INPUT -j limit-443 + inet/filter/OUTPUT -j limit-443 + inet6/filter/OUTPUT -j limit-443 + inet/filter/limit-443 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-443 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 451 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-444 + inet6/filter/FORWARD -j limit-444 + inet/filter/INPUT -j limit-444 + inet6/filter/INPUT -j limit-444 + inet/filter/OUTPUT -j limit-444 + inet6/filter/OUTPUT -j limit-444 + inet/filter/limit-444 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-444 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-14 + inet6/filter/FORWARD -j logaccept-final-14 + inet/filter/INPUT -j logaccept-final-14 + inet6/filter/INPUT -j logaccept-final-14 + inet/filter/OUTPUT -j logaccept-final-14 + inet6/filter/OUTPUT -j logaccept-final-14 + inet/filter/logaccept-final-14 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-14 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-14 -j ACCEPT + inet6/filter/logaccept-final-14 -j ACCEPT + +Filter 452 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-445 + inet6/filter/FORWARD -j limit-445 + inet/filter/INPUT -j limit-445 + inet6/filter/INPUT -j limit-445 + inet/filter/OUTPUT -j limit-445 + inet6/filter/OUTPUT -j limit-445 + inet/filter/limit-445 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-445 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-445 -m limit --limit 1/second -j LOG + inet6/filter/limit-445 -m limit --limit 1/second -j LOG + +Filter 453 {"flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-446 + inet6/filter/FORWARD -j limit-446 + inet/filter/INPUT -j limit-446 + inet6/filter/INPUT -j limit-446 + inet/filter/OUTPUT -j limit-446 + inet6/filter/OUTPUT -j limit-446 + inet/filter/limit-446 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-446 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 454 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-447 + inet6/filter/FORWARD -j limit-447 + inet/filter/INPUT -j limit-447 + inet6/filter/INPUT -j limit-447 + inet/filter/OUTPUT -j limit-447 + inet6/filter/OUTPUT -j limit-447 + inet/filter/limit-447 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-447 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 455 {"flow-limit":{"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-448 + inet6/filter/FORWARD -j limit-448 + inet/filter/INPUT -j limit-448 + inet6/filter/INPUT -j limit-448 + inet/filter/OUTPUT -j limit-448 + inet6/filter/OUTPUT -j limit-448 + inet/filter/limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-448 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-448 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-448 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 456 {"action":"pass","flow-limit":{"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-449 + inet6/filter/FORWARD -j limit-449 + inet/filter/INPUT -j limit-449 + inet6/filter/INPUT -j limit-449 + inet/filter/OUTPUT -j limit-449 + inet6/filter/OUTPUT -j limit-449 + inet/filter/limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-449 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-449 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-449 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 457 {"flow-limit":{"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-450 + inet6/filter/FORWARD -j limit-450 + inet/filter/INPUT -j limit-450 + inet6/filter/INPUT -j limit-450 + inet/filter/OUTPUT -j limit-450 + inet6/filter/OUTPUT -j limit-450 + inet/filter/limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-450 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-450 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-450 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-15 + inet6/filter/FORWARD -j logaccept-final-15 + inet/filter/INPUT -j logaccept-final-15 + inet6/filter/INPUT -j logaccept-final-15 + inet/filter/OUTPUT -j logaccept-final-15 + inet6/filter/OUTPUT -j logaccept-final-15 + inet/filter/logaccept-final-15 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-15 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-15 -j ACCEPT + inet6/filter/logaccept-final-15 -j ACCEPT + +Filter 458 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-451 + inet6/filter/FORWARD -j limit-451 + inet/filter/INPUT -j limit-451 + inet6/filter/INPUT -j limit-451 + inet/filter/OUTPUT -j limit-451 + inet6/filter/OUTPUT -j limit-451 + inet/filter/limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-451 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-451 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-451 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 459 {"flow-limit":{"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-452 + inet6/filter/FORWARD -j limit-452 + inet/filter/INPUT -j limit-452 + inet6/filter/INPUT -j limit-452 + inet/filter/OUTPUT -j limit-452 + inet6/filter/OUTPUT -j limit-452 + inet/filter/limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-452 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-452 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-452 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 460 {"action":"pass","flow-limit":{"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-453 + inet6/filter/FORWARD -j limit-453 + inet/filter/INPUT -j limit-453 + inet6/filter/INPUT -j limit-453 + inet/filter/OUTPUT -j limit-453 + inet6/filter/OUTPUT -j limit-453 + inet/filter/limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-453 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-453 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-453 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 461 {"flow-limit":{"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-454 + inet6/filter/FORWARD -j limit-454 + inet/filter/INPUT -j limit-454 + inet6/filter/INPUT -j limit-454 + inet/filter/OUTPUT -j limit-454 + inet6/filter/OUTPUT -j limit-454 + inet/filter/limit-454 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-454 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 462 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-455 + inet6/filter/FORWARD -j limit-455 + inet/filter/INPUT -j limit-455 + inet6/filter/INPUT -j limit-455 + inet/filter/OUTPUT -j limit-455 + inet6/filter/OUTPUT -j limit-455 + inet/filter/limit-455 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-455 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 463 {"flow-limit":{"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-456 + inet6/filter/FORWARD -j limit-456 + inet/filter/INPUT -j limit-456 + inet6/filter/INPUT -j limit-456 + inet/filter/OUTPUT -j limit-456 + inet6/filter/OUTPUT -j limit-456 + inet/filter/limit-456 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-456 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-16 + inet6/filter/FORWARD -j logaccept-final-16 + inet/filter/INPUT -j logaccept-final-16 + inet6/filter/INPUT -j logaccept-final-16 + inet/filter/OUTPUT -j logaccept-final-16 + inet6/filter/OUTPUT -j logaccept-final-16 + inet/filter/logaccept-final-16 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-16 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-16 -j ACCEPT + inet6/filter/logaccept-final-16 -j ACCEPT + +Filter 464 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-457 + inet6/filter/FORWARD -j limit-457 + inet/filter/INPUT -j limit-457 + inet6/filter/INPUT -j limit-457 + inet/filter/OUTPUT -j limit-457 + inet6/filter/OUTPUT -j limit-457 + inet/filter/limit-457 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-457 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-457 -m limit --limit 1/second -j LOG + inet6/filter/limit-457 -m limit --limit 1/second -j LOG + +Filter 465 {"flow-limit":{"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-458 + inet6/filter/FORWARD -j limit-458 + inet/filter/INPUT -j limit-458 + inet6/filter/INPUT -j limit-458 + inet/filter/OUTPUT -j limit-458 + inet6/filter/OUTPUT -j limit-458 + inet/filter/limit-458 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-458 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 466 {"action":"pass","flow-limit":{"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-459 + inet6/filter/FORWARD -j limit-459 + inet/filter/INPUT -j limit-459 + inet6/filter/INPUT -j limit-459 + inet/filter/OUTPUT -j limit-459 + inet6/filter/OUTPUT -j limit-459 + inet/filter/limit-459 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-459 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 467 {"flow-limit":{"addr":"dest","log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-460 + inet6/filter/FORWARD -j limit-460 + inet/filter/INPUT -j limit-460 + inet6/filter/INPUT -j limit-460 + inet/filter/OUTPUT -j limit-460 + inet6/filter/OUTPUT -j limit-460 + inet/filter/limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-460 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-460 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-460 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 468 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-461 + inet6/filter/FORWARD -j limit-461 + inet/filter/INPUT -j limit-461 + inet6/filter/INPUT -j limit-461 + inet/filter/OUTPUT -j limit-461 + inet6/filter/OUTPUT -j limit-461 + inet/filter/limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-461 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-461 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-461 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 469 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-462 + inet6/filter/FORWARD -j limit-462 + inet/filter/INPUT -j limit-462 + inet6/filter/INPUT -j limit-462 + inet/filter/OUTPUT -j limit-462 + inet6/filter/OUTPUT -j limit-462 + inet/filter/limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-462 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-462 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-462 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j logaccept-final-17 inet6/filter/FORWARD -j logaccept-final-17 inet/filter/INPUT -j logaccept-final-17 @@ -4557,39 +6303,31 @@ Filter 325 {"flow-limit":{"interval":5,"name":"A"},"log" inet/filter/logaccept-final-17 -j ACCEPT inet6/filter/logaccept-final-17 -j ACCEPT -Filter 326 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-319 - inet6/filter/FORWARD -j limit-319 - inet/filter/INPUT -j limit-319 - inet6/filter/INPUT -j limit-319 - inet/filter/OUTPUT -j limit-319 - inet6/filter/OUTPUT -j limit-319 - inet/filter/limit-319 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-112 - inet6/filter/limit-319 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-112 - inet/filter/logdrop-112 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-112 -m limit --limit 1/second -j LOG - inet/filter/logdrop-112 -j DROP - inet6/filter/logdrop-112 -j DROP - inet/filter/limit-319 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-319 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 327 {"flow-limit":{"interval":5,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-320 - inet6/filter/FORWARD -j limit-320 - inet/filter/INPUT -j limit-320 - inet6/filter/INPUT -j limit-320 - inet/filter/OUTPUT -j limit-320 - inet6/filter/OUTPUT -j limit-320 - inet/filter/limit-320 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-113 - inet6/filter/limit-320 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-113 - inet/filter/logdrop-113 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-113 -m limit --limit 1/second -j LOG - inet/filter/logdrop-113 -j DROP - inet6/filter/logdrop-113 -j DROP - inet/filter/limit-320 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-320 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 470 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-463 + inet6/filter/FORWARD -j limit-463 + inet/filter/INPUT -j limit-463 + inet6/filter/INPUT -j limit-463 + inet/filter/OUTPUT -j limit-463 + inet6/filter/OUTPUT -j limit-463 + inet/filter/limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-463 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-463 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-463 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 471 {"flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-464 + inet6/filter/FORWARD -j limit-464 + inet/filter/INPUT -j limit-464 + inet6/filter/INPUT -j limit-464 + inet/filter/OUTPUT -j limit-464 + inet6/filter/OUTPUT -j limit-464 + inet/filter/limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-464 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-464 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-464 -m recent --name user:C --rdest --mask fe00:: --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4597,37 +6335,29 @@ Filter 327 {"flow-limit":{"interval":5,"name":"A"},"log" inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 328 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-321 - inet6/filter/FORWARD -j limit-321 - inet/filter/INPUT -j limit-321 - inet6/filter/INPUT -j limit-321 - inet/filter/OUTPUT -j limit-321 - inet6/filter/OUTPUT -j limit-321 - inet/filter/limit-321 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-114 - inet6/filter/limit-321 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-114 - inet/filter/logdrop-114 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-114 -m limit --limit 1/second -j LOG - inet/filter/logdrop-114 -j DROP - inet6/filter/logdrop-114 -j DROP - inet/filter/limit-321 -m recent --name user:A --rsource --mask 255.255.255.255 --set - inet6/filter/limit-321 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 329 {"flow-limit":{"interval":5,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-322 - inet6/filter/FORWARD -j limit-322 - inet/filter/INPUT -j limit-322 - inet6/filter/INPUT -j limit-322 - inet/filter/OUTPUT -j limit-322 - inet6/filter/OUTPUT -j limit-322 - inet/filter/limit-322 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-115 - inet6/filter/limit-322 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-115 - inet/filter/logdrop-115 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-115 -m limit --limit 1/second -j LOG - inet/filter/logdrop-115 -j DROP - inet6/filter/logdrop-115 -j DROP +Filter 472 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-465 + inet6/filter/FORWARD -j limit-465 + inet/filter/INPUT -j limit-465 + inet6/filter/INPUT -j limit-465 + inet/filter/OUTPUT -j limit-465 + inet6/filter/OUTPUT -j limit-465 + inet/filter/limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-465 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-465 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-465 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 473 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-466 + inet6/filter/FORWARD -j limit-466 + inet/filter/INPUT -j limit-466 + inet6/filter/INPUT -j limit-466 + inet/filter/OUTPUT -j limit-466 + inet6/filter/OUTPUT -j limit-466 + inet/filter/limit-466 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-466 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4635,35 +6365,27 @@ Filter 329 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 330 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-323 - inet6/filter/FORWARD -j limit-323 - inet/filter/INPUT -j limit-323 - inet6/filter/INPUT -j limit-323 - inet/filter/OUTPUT -j limit-323 - inet6/filter/OUTPUT -j limit-323 - inet/filter/limit-323 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-116 - inet6/filter/limit-323 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-116 - inet/filter/logdrop-116 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-116 -m limit --limit 1/second -j LOG - inet/filter/logdrop-116 -j DROP - inet6/filter/logdrop-116 -j DROP - -Filter 331 {"flow-limit":{"interval":5,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-324 - inet6/filter/FORWARD -j limit-324 - inet/filter/INPUT -j limit-324 - inet6/filter/INPUT -j limit-324 - inet/filter/OUTPUT -j limit-324 - inet6/filter/OUTPUT -j limit-324 - inet/filter/limit-324 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-117 - inet6/filter/limit-324 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-117 - inet/filter/logdrop-117 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-117 -m limit --limit 1/second -j LOG - inet/filter/logdrop-117 -j DROP - inet6/filter/logdrop-117 -j DROP +Filter 474 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-467 + inet6/filter/FORWARD -j limit-467 + inet/filter/INPUT -j limit-467 + inet6/filter/INPUT -j limit-467 + inet/filter/OUTPUT -j limit-467 + inet6/filter/OUTPUT -j limit-467 + inet/filter/limit-467 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-467 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 475 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-468 + inet6/filter/FORWARD -j limit-468 + inet/filter/INPUT -j limit-468 + inet6/filter/INPUT -j limit-468 + inet/filter/OUTPUT -j limit-468 + inet6/filter/OUTPUT -j limit-468 + inet/filter/limit-468 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-468 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j logaccept-final-18 inet6/filter/FORWARD -j logaccept-final-18 inet/filter/INPUT -j logaccept-final-18 @@ -4675,37 +6397,29 @@ Filter 331 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/logaccept-final-18 -j ACCEPT inet6/filter/logaccept-final-18 -j ACCEPT -Filter 332 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-325 - inet6/filter/FORWARD -j limit-325 - inet/filter/INPUT -j limit-325 - inet6/filter/INPUT -j limit-325 - inet/filter/OUTPUT -j limit-325 - inet6/filter/OUTPUT -j limit-325 - inet/filter/limit-325 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-118 - inet6/filter/limit-325 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-118 - inet/filter/logdrop-118 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-118 -m limit --limit 1/second -j LOG - inet/filter/logdrop-118 -j DROP - inet6/filter/logdrop-118 -j DROP - inet/filter/limit-325 -m limit --limit 1/second -j LOG - inet6/filter/limit-325 -m limit --limit 1/second -j LOG - -Filter 333 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-326 - inet6/filter/FORWARD -j limit-326 - inet/filter/INPUT -j limit-326 - inet6/filter/INPUT -j limit-326 - inet/filter/OUTPUT -j limit-326 - inet6/filter/OUTPUT -j limit-326 - inet/filter/limit-326 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-119 - inet6/filter/limit-326 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-119 - inet/filter/logdrop-119 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-119 -m limit --limit 1/second -j LOG - inet/filter/logdrop-119 -j DROP - inet6/filter/logdrop-119 -j DROP +Filter 476 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-469 + inet6/filter/FORWARD -j limit-469 + inet/filter/INPUT -j limit-469 + inet6/filter/INPUT -j limit-469 + inet/filter/OUTPUT -j limit-469 + inet6/filter/OUTPUT -j limit-469 + inet/filter/limit-469 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-469 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-469 -m limit --limit 1/second -j LOG + inet6/filter/limit-469 -m limit --limit 1/second -j LOG + +Filter 477 {"flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-470 + inet6/filter/FORWARD -j limit-470 + inet/filter/INPUT -j limit-470 + inet6/filter/INPUT -j limit-470 + inet/filter/OUTPUT -j limit-470 + inet6/filter/OUTPUT -j limit-470 + inet/filter/limit-470 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-470 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4713,37 +6427,29 @@ Filter 333 {"flow-limit":{"interval":5,"name":"A","updat inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 334 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-327 - inet6/filter/FORWARD -j limit-327 - inet/filter/INPUT -j limit-327 - inet6/filter/INPUT -j limit-327 - inet/filter/OUTPUT -j limit-327 - inet6/filter/OUTPUT -j limit-327 - inet/filter/limit-327 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-120 - inet6/filter/limit-327 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-120 - inet/filter/logdrop-120 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-120 -m limit --limit 1/second -j LOG - inet/filter/logdrop-120 -j DROP - inet6/filter/logdrop-120 -j DROP - -Filter 335 {"flow-limit":{"addr":"dest","interval":5,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-328 - inet6/filter/FORWARD -j limit-328 - inet/filter/INPUT -j limit-328 - inet6/filter/INPUT -j limit-328 - inet/filter/OUTPUT -j limit-328 - inet6/filter/OUTPUT -j limit-328 - inet/filter/limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-121 - inet6/filter/limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-121 - inet/filter/logdrop-121 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-121 -m limit --limit 1/second -j LOG - inet/filter/logdrop-121 -j DROP - inet6/filter/logdrop-121 -j DROP - inet/filter/limit-328 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-328 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 478 {"action":"pass","flow-limit":{"addr":"dest","log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-471 + inet6/filter/FORWARD -j limit-471 + inet/filter/INPUT -j limit-471 + inet6/filter/INPUT -j limit-471 + inet/filter/OUTPUT -j limit-471 + inet6/filter/OUTPUT -j limit-471 + inet/filter/limit-471 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-471 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 479 {"flow-limit":{"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-472 + inet6/filter/FORWARD -j limit-472 + inet/filter/INPUT -j limit-472 + inet6/filter/INPUT -j limit-472 + inet/filter/OUTPUT -j limit-472 + inet6/filter/OUTPUT -j limit-472 + inet/filter/limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-472 -m recent --name limit-472 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-472 -m recent --name limit-472 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4751,39 +6457,31 @@ Filter 335 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 336 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"}} -(filter-limit) - inet/filter/FORWARD -j limit-329 - inet6/filter/FORWARD -j limit-329 - inet/filter/INPUT -j limit-329 - inet6/filter/INPUT -j limit-329 - inet/filter/OUTPUT -j limit-329 - inet6/filter/OUTPUT -j limit-329 - inet/filter/limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-122 - inet6/filter/limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-122 - inet/filter/logdrop-122 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-122 -m limit --limit 1/second -j LOG - inet/filter/logdrop-122 -j DROP - inet6/filter/logdrop-122 -j DROP - inet/filter/limit-329 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-329 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 337 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-330 - inet6/filter/FORWARD -j limit-330 - inet/filter/INPUT -j limit-330 - inet6/filter/INPUT -j limit-330 - inet/filter/OUTPUT -j limit-330 - inet6/filter/OUTPUT -j limit-330 - inet/filter/limit-330 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-123 - inet6/filter/limit-330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-123 - inet/filter/logdrop-123 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-123 -m limit --limit 1/second -j LOG - inet/filter/logdrop-123 -j DROP - inet6/filter/logdrop-123 -j DROP - inet/filter/limit-330 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-330 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 480 {"action":"pass","flow-limit":{"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-473 + inet6/filter/FORWARD -j limit-473 + inet/filter/INPUT -j limit-473 + inet6/filter/INPUT -j limit-473 + inet/filter/OUTPUT -j limit-473 + inet6/filter/OUTPUT -j limit-473 + inet/filter/limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-473 -m recent --name limit-473 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-473 -m recent --name limit-473 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 481 {"flow-limit":{"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-474 + inet6/filter/FORWARD -j limit-474 + inet/filter/INPUT -j limit-474 + inet6/filter/INPUT -j limit-474 + inet/filter/OUTPUT -j limit-474 + inet6/filter/OUTPUT -j limit-474 + inet/filter/limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-474 -m recent --name limit-474 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-474 -m recent --name limit-474 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-19 inet6/filter/FORWARD -j logaccept-final-19 inet/filter/INPUT -j logaccept-final-19 @@ -4795,39 +6493,31 @@ Filter 337 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/logaccept-final-19 -j ACCEPT inet6/filter/logaccept-final-19 -j ACCEPT -Filter 338 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-331 - inet6/filter/FORWARD -j limit-331 - inet/filter/INPUT -j limit-331 - inet6/filter/INPUT -j limit-331 - inet/filter/OUTPUT -j limit-331 - inet6/filter/OUTPUT -j limit-331 - inet/filter/limit-331 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-124 - inet6/filter/limit-331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-124 - inet/filter/logdrop-124 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-124 -m limit --limit 1/second -j LOG - inet/filter/logdrop-124 -j DROP - inet6/filter/logdrop-124 -j DROP - inet/filter/limit-331 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG - inet6/filter/limit-331 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG - -Filter 339 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-332 - inet6/filter/FORWARD -j limit-332 - inet/filter/INPUT -j limit-332 - inet6/filter/INPUT -j limit-332 - inet/filter/OUTPUT -j limit-332 - inet6/filter/OUTPUT -j limit-332 - inet/filter/limit-332 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-125 - inet6/filter/limit-332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-125 - inet/filter/logdrop-125 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-125 -m limit --limit 1/second -j LOG - inet/filter/logdrop-125 -j DROP - inet6/filter/logdrop-125 -j DROP - inet/filter/limit-332 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-332 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set +Filter 482 {"action":"pass","flow-limit":{"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-475 + inet6/filter/FORWARD -j limit-475 + inet/filter/INPUT -j limit-475 + inet6/filter/INPUT -j limit-475 + inet/filter/OUTPUT -j limit-475 + inet6/filter/OUTPUT -j limit-475 + inet/filter/limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-475 -m recent --name limit-475 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-475 -m recent --name limit-475 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 483 {"flow-limit":{"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-476 + inet6/filter/FORWARD -j limit-476 + inet/filter/INPUT -j limit-476 + inet6/filter/INPUT -j limit-476 + inet/filter/OUTPUT -j limit-476 + inet6/filter/OUTPUT -j limit-476 + inet/filter/limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-476 -m recent --name limit-476 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-476 -m recent --name limit-476 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4835,37 +6525,31 @@ Filter 339 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 340 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} -(filter-limit) - inet/filter/FORWARD -j limit-333 - inet6/filter/FORWARD -j limit-333 - inet/filter/INPUT -j limit-333 - inet6/filter/INPUT -j limit-333 - inet/filter/OUTPUT -j limit-333 - inet6/filter/OUTPUT -j limit-333 - inet/filter/limit-333 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-126 - inet6/filter/limit-333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-126 - inet/filter/logdrop-126 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-126 -m limit --limit 1/second -j LOG - inet/filter/logdrop-126 -j DROP - inet6/filter/logdrop-126 -j DROP - inet/filter/limit-333 -m recent --name user:A --rdest --mask 255.255.255.255 --set - inet6/filter/limit-333 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set - -Filter 341 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-334 - inet6/filter/FORWARD -j limit-334 - inet/filter/INPUT -j limit-334 - inet6/filter/INPUT -j limit-334 - inet/filter/OUTPUT -j limit-334 - inet6/filter/OUTPUT -j limit-334 - inet/filter/limit-334 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-127 - inet6/filter/limit-334 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-127 - inet/filter/logdrop-127 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-127 -m limit --limit 1/second -j LOG - inet/filter/logdrop-127 -j DROP - inet6/filter/logdrop-127 -j DROP +Filter 484 {"action":"pass","flow-limit":{"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-477 + inet6/filter/FORWARD -j limit-477 + inet/filter/INPUT -j limit-477 + inet6/filter/INPUT -j limit-477 + inet/filter/OUTPUT -j limit-477 + inet6/filter/OUTPUT -j limit-477 + inet/filter/limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-477 -m recent --name limit-477 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-477 -m recent --name limit-477 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 485 {"flow-limit":{"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-478 + inet6/filter/FORWARD -j limit-478 + inet/filter/INPUT -j limit-478 + inet6/filter/INPUT -j limit-478 + inet/filter/OUTPUT -j limit-478 + inet6/filter/OUTPUT -j limit-478 + inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-478 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-478 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j ACCEPT inet6/filter/FORWARD -j ACCEPT inet/filter/INPUT -j ACCEPT @@ -4873,35 +6557,31 @@ Filter 341 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/OUTPUT -j ACCEPT inet6/filter/OUTPUT -j ACCEPT -Filter 342 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} -(filter-limit) - inet/filter/FORWARD -j limit-335 - inet6/filter/FORWARD -j limit-335 - inet/filter/INPUT -j limit-335 - inet6/filter/INPUT -j limit-335 - inet/filter/OUTPUT -j limit-335 - inet6/filter/OUTPUT -j limit-335 - inet/filter/limit-335 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-128 - inet6/filter/limit-335 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-128 - inet/filter/logdrop-128 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-128 -m limit --limit 1/second -j LOG - inet/filter/logdrop-128 -j DROP - inet6/filter/logdrop-128 -j DROP - -Filter 343 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} -(filter-limit) - inet/filter/FORWARD -j limit-336 - inet6/filter/FORWARD -j limit-336 - inet/filter/INPUT -j limit-336 - inet6/filter/INPUT -j limit-336 - inet/filter/OUTPUT -j limit-336 - inet6/filter/OUTPUT -j limit-336 - inet/filter/limit-336 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-129 - inet6/filter/limit-336 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-129 - inet/filter/logdrop-129 -m limit --limit 1/second -j LOG - inet6/filter/logdrop-129 -m limit --limit 1/second -j LOG - inet/filter/logdrop-129 -j DROP - inet6/filter/logdrop-129 -j DROP +Filter 486 {"action":"pass","flow-limit":{"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-479 + inet6/filter/FORWARD -j limit-479 + inet/filter/INPUT -j limit-479 + inet6/filter/INPUT -j limit-479 + inet/filter/OUTPUT -j limit-479 + inet6/filter/OUTPUT -j limit-479 + inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-479 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-479 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 487 {"flow-limit":{"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-480 + inet6/filter/FORWARD -j limit-480 + inet/filter/INPUT -j limit-480 + inet6/filter/INPUT -j limit-480 + inet/filter/OUTPUT -j limit-480 + inet6/filter/OUTPUT -j limit-480 + inet/filter/limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-480 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-480 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set inet/filter/FORWARD -j logaccept-final-20 inet6/filter/FORWARD -j logaccept-final-20 inet/filter/INPUT -j logaccept-final-20 @@ -4913,1573 +6593,6105 @@ Filter 343 {"flow-limit":{"addr":"dest","interval":5,"na inet/filter/logaccept-final-20 -j ACCEPT inet6/filter/logaccept-final-20 -j ACCEPT -Filter 344 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +Filter 488 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-481 + inet6/filter/FORWARD -j limit-481 + inet/filter/INPUT -j limit-481 + inet6/filter/INPUT -j limit-481 + inet/filter/OUTPUT -j limit-481 + inet6/filter/OUTPUT -j limit-481 + inet/filter/limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-481 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-481 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 489 {"flow-limit":{"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-482 + inet6/filter/FORWARD -j limit-482 + inet/filter/INPUT -j limit-482 + inet6/filter/INPUT -j limit-482 + inet/filter/OUTPUT -j limit-482 + inet6/filter/OUTPUT -j limit-482 + inet/filter/limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-482 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-482 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 490 {"action":"pass","flow-limit":{"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-483 + inet6/filter/FORWARD -j limit-483 + inet/filter/INPUT -j limit-483 + inet6/filter/INPUT -j limit-483 + inet/filter/OUTPUT -j limit-483 + inet6/filter/OUTPUT -j limit-483 + inet/filter/limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-483 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-483 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 491 {"flow-limit":{"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-484 + inet6/filter/FORWARD -j limit-484 + inet/filter/INPUT -j limit-484 + inet6/filter/INPUT -j limit-484 + inet/filter/OUTPUT -j limit-484 + inet6/filter/OUTPUT -j limit-484 + inet/filter/limit-484 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-484 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 492 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-485 + inet6/filter/FORWARD -j limit-485 + inet/filter/INPUT -j limit-485 + inet6/filter/INPUT -j limit-485 + inet/filter/OUTPUT -j limit-485 + inet6/filter/OUTPUT -j limit-485 + inet/filter/limit-485 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-485 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 493 {"flow-limit":{"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-486 + inet6/filter/FORWARD -j limit-486 + inet/filter/INPUT -j limit-486 + inet6/filter/INPUT -j limit-486 + inet/filter/OUTPUT -j limit-486 + inet6/filter/OUTPUT -j limit-486 + inet/filter/limit-486 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-486 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-21 + inet6/filter/FORWARD -j logaccept-final-21 + inet/filter/INPUT -j logaccept-final-21 + inet6/filter/INPUT -j logaccept-final-21 + inet/filter/OUTPUT -j logaccept-final-21 + inet6/filter/OUTPUT -j logaccept-final-21 + inet/filter/logaccept-final-21 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-21 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-21 -j ACCEPT + inet6/filter/logaccept-final-21 -j ACCEPT + +Filter 494 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-487 + inet6/filter/FORWARD -j limit-487 + inet/filter/INPUT -j limit-487 + inet6/filter/INPUT -j limit-487 + inet/filter/OUTPUT -j limit-487 + inet6/filter/OUTPUT -j limit-487 + inet/filter/limit-487 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-487 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-487 -m limit --limit 1/second -j LOG + inet6/filter/limit-487 -m limit --limit 1/second -j LOG + +Filter 495 {"flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-488 + inet6/filter/FORWARD -j limit-488 + inet/filter/INPUT -j limit-488 + inet6/filter/INPUT -j limit-488 + inet/filter/OUTPUT -j limit-488 + inet6/filter/OUTPUT -j limit-488 + inet/filter/limit-488 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-488 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 496 {"action":"pass","flow-limit":{"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-489 + inet6/filter/FORWARD -j limit-489 + inet/filter/INPUT -j limit-489 + inet6/filter/INPUT -j limit-489 + inet/filter/OUTPUT -j limit-489 + inet6/filter/OUTPUT -j limit-489 + inet/filter/limit-489 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-489 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 497 {"flow-limit":{"addr":"dest","log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-490 + inet6/filter/FORWARD -j limit-490 + inet/filter/INPUT -j limit-490 + inet6/filter/INPUT -j limit-490 + inet/filter/OUTPUT -j limit-490 + inet6/filter/OUTPUT -j limit-490 + inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-490 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-490 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 498 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-491 + inet6/filter/FORWARD -j limit-491 + inet/filter/INPUT -j limit-491 + inet6/filter/INPUT -j limit-491 + inet/filter/OUTPUT -j limit-491 + inet6/filter/OUTPUT -j limit-491 + inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-491 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-491 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 499 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-492 + inet6/filter/FORWARD -j limit-492 + inet/filter/INPUT -j limit-492 + inet6/filter/INPUT -j limit-492 + inet/filter/OUTPUT -j limit-492 + inet6/filter/OUTPUT -j limit-492 + inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-492 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-492 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-22 + inet6/filter/FORWARD -j logaccept-final-22 + inet/filter/INPUT -j logaccept-final-22 + inet6/filter/INPUT -j logaccept-final-22 + inet/filter/OUTPUT -j logaccept-final-22 + inet6/filter/OUTPUT -j logaccept-final-22 + inet/filter/logaccept-final-22 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-22 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-22 -j ACCEPT + inet6/filter/logaccept-final-22 -j ACCEPT + +Filter 500 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-493 + inet6/filter/FORWARD -j limit-493 + inet/filter/INPUT -j limit-493 + inet6/filter/INPUT -j limit-493 + inet/filter/OUTPUT -j limit-493 + inet6/filter/OUTPUT -j limit-493 + inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-493 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-493 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 501 {"flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-494 + inet6/filter/FORWARD -j limit-494 + inet/filter/INPUT -j limit-494 + inet6/filter/INPUT -j limit-494 + inet/filter/OUTPUT -j limit-494 + inet6/filter/OUTPUT -j limit-494 + inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-494 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-494 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 502 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-495 + inet6/filter/FORWARD -j limit-495 + inet/filter/INPUT -j limit-495 + inet6/filter/INPUT -j limit-495 + inet/filter/OUTPUT -j limit-495 + inet6/filter/OUTPUT -j limit-495 + inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-495 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-495 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 503 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-496 + inet6/filter/FORWARD -j limit-496 + inet/filter/INPUT -j limit-496 + inet6/filter/INPUT -j limit-496 + inet/filter/OUTPUT -j limit-496 + inet6/filter/OUTPUT -j limit-496 + inet/filter/limit-496 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-496 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 504 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-497 + inet6/filter/FORWARD -j limit-497 + inet/filter/INPUT -j limit-497 + inet6/filter/INPUT -j limit-497 + inet/filter/OUTPUT -j limit-497 + inet6/filter/OUTPUT -j limit-497 + inet/filter/limit-497 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-497 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 505 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-498 + inet6/filter/FORWARD -j limit-498 + inet/filter/INPUT -j limit-498 + inet6/filter/INPUT -j limit-498 + inet/filter/OUTPUT -j limit-498 + inet6/filter/OUTPUT -j limit-498 + inet/filter/limit-498 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-498 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-23 + inet6/filter/FORWARD -j logaccept-final-23 + inet/filter/INPUT -j logaccept-final-23 + inet6/filter/INPUT -j logaccept-final-23 + inet/filter/OUTPUT -j logaccept-final-23 + inet6/filter/OUTPUT -j logaccept-final-23 + inet/filter/logaccept-final-23 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-23 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-23 -j ACCEPT + inet6/filter/logaccept-final-23 -j ACCEPT + +Filter 506 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-499 + inet6/filter/FORWARD -j limit-499 + inet/filter/INPUT -j limit-499 + inet6/filter/INPUT -j limit-499 + inet/filter/OUTPUT -j limit-499 + inet6/filter/OUTPUT -j limit-499 + inet/filter/limit-499 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-499 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-499 -m limit --limit 1/second -j LOG + inet6/filter/limit-499 -m limit --limit 1/second -j LOG + +Filter 507 {"flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-500 + inet6/filter/FORWARD -j limit-500 + inet/filter/INPUT -j limit-500 + inet6/filter/INPUT -j limit-500 + inet/filter/OUTPUT -j limit-500 + inet6/filter/OUTPUT -j limit-500 + inet/filter/limit-500 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-500 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 508 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-501 + inet6/filter/FORWARD -j limit-501 + inet/filter/INPUT -j limit-501 + inet6/filter/INPUT -j limit-501 + inet/filter/OUTPUT -j limit-501 + inet6/filter/OUTPUT -j limit-501 + inet/filter/limit-501 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-501 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 509 {"flow-limit":{"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-502 + inet6/filter/FORWARD -j limit-502 + inet/filter/INPUT -j limit-502 + inet6/filter/INPUT -j limit-502 + inet/filter/OUTPUT -j limit-502 + inet6/filter/OUTPUT -j limit-502 + inet/filter/limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-502 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-502 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-502 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 510 {"action":"pass","flow-limit":{"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-503 + inet6/filter/FORWARD -j limit-503 + inet/filter/INPUT -j limit-503 + inet6/filter/INPUT -j limit-503 + inet/filter/OUTPUT -j limit-503 + inet6/filter/OUTPUT -j limit-503 + inet/filter/limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-503 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-503 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-503 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 511 {"flow-limit":{"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-504 + inet6/filter/FORWARD -j limit-504 + inet/filter/INPUT -j limit-504 + inet6/filter/INPUT -j limit-504 + inet/filter/OUTPUT -j limit-504 + inet6/filter/OUTPUT -j limit-504 + inet/filter/limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-504 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-504 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-504 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-24 + inet6/filter/FORWARD -j logaccept-final-24 + inet/filter/INPUT -j logaccept-final-24 + inet6/filter/INPUT -j logaccept-final-24 + inet/filter/OUTPUT -j logaccept-final-24 + inet6/filter/OUTPUT -j logaccept-final-24 + inet/filter/logaccept-final-24 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-24 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-24 -j ACCEPT + inet6/filter/logaccept-final-24 -j ACCEPT + +Filter 512 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-505 + inet6/filter/FORWARD -j limit-505 + inet/filter/INPUT -j limit-505 + inet6/filter/INPUT -j limit-505 + inet/filter/OUTPUT -j limit-505 + inet6/filter/OUTPUT -j limit-505 + inet/filter/limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-505 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-505 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-505 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 513 {"flow-limit":{"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-506 + inet6/filter/FORWARD -j limit-506 + inet/filter/INPUT -j limit-506 + inet6/filter/INPUT -j limit-506 + inet/filter/OUTPUT -j limit-506 + inet6/filter/OUTPUT -j limit-506 + inet/filter/limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-506 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-506 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-506 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 514 {"action":"pass","flow-limit":{"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-507 + inet6/filter/FORWARD -j limit-507 + inet/filter/INPUT -j limit-507 + inet6/filter/INPUT -j limit-507 + inet/filter/OUTPUT -j limit-507 + inet6/filter/OUTPUT -j limit-507 + inet/filter/limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-507 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-507 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-507 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 515 {"flow-limit":{"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-508 + inet6/filter/FORWARD -j limit-508 + inet/filter/INPUT -j limit-508 + inet6/filter/INPUT -j limit-508 + inet/filter/OUTPUT -j limit-508 + inet6/filter/OUTPUT -j limit-508 + inet/filter/limit-508 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-508 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 516 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-509 + inet6/filter/FORWARD -j limit-509 + inet/filter/INPUT -j limit-509 + inet6/filter/INPUT -j limit-509 + inet/filter/OUTPUT -j limit-509 + inet6/filter/OUTPUT -j limit-509 + inet/filter/limit-509 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-509 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 517 {"flow-limit":{"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-510 + inet6/filter/FORWARD -j limit-510 + inet/filter/INPUT -j limit-510 + inet6/filter/INPUT -j limit-510 + inet/filter/OUTPUT -j limit-510 + inet6/filter/OUTPUT -j limit-510 + inet/filter/limit-510 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-510 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-25 + inet6/filter/FORWARD -j logaccept-final-25 + inet/filter/INPUT -j logaccept-final-25 + inet6/filter/INPUT -j logaccept-final-25 + inet/filter/OUTPUT -j logaccept-final-25 + inet6/filter/OUTPUT -j logaccept-final-25 + inet/filter/logaccept-final-25 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-25 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-25 -j ACCEPT + inet6/filter/logaccept-final-25 -j ACCEPT + +Filter 518 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-511 + inet6/filter/FORWARD -j limit-511 + inet/filter/INPUT -j limit-511 + inet6/filter/INPUT -j limit-511 + inet/filter/OUTPUT -j limit-511 + inet6/filter/OUTPUT -j limit-511 + inet/filter/limit-511 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-511 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-511 -m limit --limit 1/second -j LOG + inet6/filter/limit-511 -m limit --limit 1/second -j LOG + +Filter 519 {"flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-512 + inet6/filter/FORWARD -j limit-512 + inet/filter/INPUT -j limit-512 + inet6/filter/INPUT -j limit-512 + inet/filter/OUTPUT -j limit-512 + inet6/filter/OUTPUT -j limit-512 + inet/filter/limit-512 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-512 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 520 {"action":"pass","flow-limit":{"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-513 + inet6/filter/FORWARD -j limit-513 + inet/filter/INPUT -j limit-513 + inet6/filter/INPUT -j limit-513 + inet/filter/OUTPUT -j limit-513 + inet6/filter/OUTPUT -j limit-513 + inet/filter/limit-513 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-513 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 521 {"flow-limit":{"addr":"dest","log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-514 + inet6/filter/FORWARD -j limit-514 + inet/filter/INPUT -j limit-514 + inet6/filter/INPUT -j limit-514 + inet/filter/OUTPUT -j limit-514 + inet6/filter/OUTPUT -j limit-514 + inet/filter/limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-514 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-514 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-514 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 522 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-515 + inet6/filter/FORWARD -j limit-515 + inet/filter/INPUT -j limit-515 + inet6/filter/INPUT -j limit-515 + inet/filter/OUTPUT -j limit-515 + inet6/filter/OUTPUT -j limit-515 + inet/filter/limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-515 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-515 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-515 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 523 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-516 + inet6/filter/FORWARD -j limit-516 + inet/filter/INPUT -j limit-516 + inet6/filter/INPUT -j limit-516 + inet/filter/OUTPUT -j limit-516 + inet6/filter/OUTPUT -j limit-516 + inet/filter/limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-516 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-516 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-516 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-26 + inet6/filter/FORWARD -j logaccept-final-26 + inet/filter/INPUT -j logaccept-final-26 + inet6/filter/INPUT -j logaccept-final-26 + inet/filter/OUTPUT -j logaccept-final-26 + inet6/filter/OUTPUT -j logaccept-final-26 + inet/filter/logaccept-final-26 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-26 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-26 -j ACCEPT + inet6/filter/logaccept-final-26 -j ACCEPT + +Filter 524 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-517 + inet6/filter/FORWARD -j limit-517 + inet/filter/INPUT -j limit-517 + inet6/filter/INPUT -j limit-517 + inet/filter/OUTPUT -j limit-517 + inet6/filter/OUTPUT -j limit-517 + inet/filter/limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-517 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-517 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-517 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 525 {"flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-518 + inet6/filter/FORWARD -j limit-518 + inet/filter/INPUT -j limit-518 + inet6/filter/INPUT -j limit-518 + inet/filter/OUTPUT -j limit-518 + inet6/filter/OUTPUT -j limit-518 + inet/filter/limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-518 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-518 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-518 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 526 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-519 + inet6/filter/FORWARD -j limit-519 + inet/filter/INPUT -j limit-519 + inet6/filter/INPUT -j limit-519 + inet/filter/OUTPUT -j limit-519 + inet6/filter/OUTPUT -j limit-519 + inet/filter/limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-519 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-519 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-519 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 527 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-520 + inet6/filter/FORWARD -j limit-520 + inet/filter/INPUT -j limit-520 + inet6/filter/INPUT -j limit-520 + inet/filter/OUTPUT -j limit-520 + inet6/filter/OUTPUT -j limit-520 + inet/filter/limit-520 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-520 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 528 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-521 + inet6/filter/FORWARD -j limit-521 + inet/filter/INPUT -j limit-521 + inet6/filter/INPUT -j limit-521 + inet/filter/OUTPUT -j limit-521 + inet6/filter/OUTPUT -j limit-521 + inet/filter/limit-521 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-521 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 529 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-522 + inet6/filter/FORWARD -j limit-522 + inet/filter/INPUT -j limit-522 + inet6/filter/INPUT -j limit-522 + inet/filter/OUTPUT -j limit-522 + inet6/filter/OUTPUT -j limit-522 + inet/filter/limit-522 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-522 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j logaccept-final-27 + inet6/filter/FORWARD -j logaccept-final-27 + inet/filter/INPUT -j logaccept-final-27 + inet6/filter/INPUT -j logaccept-final-27 + inet/filter/OUTPUT -j logaccept-final-27 + inet6/filter/OUTPUT -j logaccept-final-27 + inet/filter/logaccept-final-27 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-27 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-27 -j ACCEPT + inet6/filter/logaccept-final-27 -j ACCEPT + +Filter 530 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-523 + inet6/filter/FORWARD -j limit-523 + inet/filter/INPUT -j limit-523 + inet6/filter/INPUT -j limit-523 + inet/filter/OUTPUT -j limit-523 + inet6/filter/OUTPUT -j limit-523 + inet/filter/limit-523 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-523 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/limit-523 -m limit --limit 1/second -j LOG + inet6/filter/limit-523 -m limit --limit 1/second -j LOG + +Filter 531 {"flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-524 + inet6/filter/FORWARD -j limit-524 + inet/filter/INPUT -j limit-524 + inet6/filter/INPUT -j limit-524 + inet/filter/OUTPUT -j limit-524 + inet6/filter/OUTPUT -j limit-524 + inet/filter/limit-524 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-524 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 532 {"action":"pass","flow-limit":{"addr":"dest","log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-525 + inet6/filter/FORWARD -j limit-525 + inet/filter/INPUT -j limit-525 + inet6/filter/INPUT -j limit-525 + inet/filter/OUTPUT -j limit-525 + inet6/filter/OUTPUT -j limit-525 + inet/filter/limit-525 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j DROP + inet6/filter/limit-525 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j DROP + +Filter 533 {"flow-limit":{"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-526 + inet6/filter/FORWARD -j limit-526 + inet/filter/INPUT -j limit-526 + inet6/filter/INPUT -j limit-526 + inet/filter/OUTPUT -j limit-526 + inet6/filter/OUTPUT -j limit-526 + inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-175 + inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-175 + inet/filter/logdrop-175 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-175 -m limit --limit 1/second -j LOG + inet/filter/logdrop-175 -j DROP + inet6/filter/logdrop-175 -j DROP + inet/filter/limit-526 -m recent --name limit-526 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-526 -m recent --name limit-526 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 534 {"action":"pass","flow-limit":{"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-527 + inet6/filter/FORWARD -j limit-527 + inet/filter/INPUT -j limit-527 + inet6/filter/INPUT -j limit-527 + inet/filter/OUTPUT -j limit-527 + inet6/filter/OUTPUT -j limit-527 + inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-176 + inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-176 + inet/filter/logdrop-176 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-176 -m limit --limit 1/second -j LOG + inet/filter/logdrop-176 -j DROP + inet6/filter/logdrop-176 -j DROP + inet/filter/limit-527 -m recent --name limit-527 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-527 -m recent --name limit-527 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 535 {"flow-limit":{"interval":5},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-528 + inet6/filter/FORWARD -j limit-528 + inet/filter/INPUT -j limit-528 + inet6/filter/INPUT -j limit-528 + inet/filter/OUTPUT -j limit-528 + inet6/filter/OUTPUT -j limit-528 + inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-177 + inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-177 + inet/filter/logdrop-177 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-177 -m limit --limit 1/second -j LOG + inet/filter/logdrop-177 -j DROP + inet6/filter/logdrop-177 -j DROP + inet/filter/limit-528 -m recent --name limit-528 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-528 -m recent --name limit-528 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-28 + inet6/filter/FORWARD -j logaccept-final-28 + inet/filter/INPUT -j logaccept-final-28 + inet6/filter/INPUT -j logaccept-final-28 + inet/filter/OUTPUT -j logaccept-final-28 + inet6/filter/OUTPUT -j logaccept-final-28 + inet/filter/logaccept-final-28 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-28 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-28 -j ACCEPT + inet6/filter/logaccept-final-28 -j ACCEPT + +Filter 536 {"action":"pass","flow-limit":{"interval":5},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-529 + inet6/filter/FORWARD -j limit-529 + inet/filter/INPUT -j limit-529 + inet6/filter/INPUT -j limit-529 + inet/filter/OUTPUT -j limit-529 + inet6/filter/OUTPUT -j limit-529 + inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-178 + inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-178 + inet/filter/logdrop-178 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-178 -m limit --limit 1/second -j LOG + inet/filter/logdrop-178 -j DROP + inet6/filter/logdrop-178 -j DROP + inet/filter/limit-529 -m recent --name limit-529 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-529 -m recent --name limit-529 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 537 {"flow-limit":{"interval":5},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-530 + inet6/filter/FORWARD -j limit-530 + inet/filter/INPUT -j limit-530 + inet6/filter/INPUT -j limit-530 + inet/filter/OUTPUT -j limit-530 + inet6/filter/OUTPUT -j limit-530 + inet/filter/limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-179 + inet6/filter/limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-179 + inet/filter/logdrop-179 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-179 -m limit --limit 1/second -j LOG + inet/filter/logdrop-179 -j DROP + inet6/filter/logdrop-179 -j DROP + inet/filter/limit-530 -m recent --name limit-530 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-530 -m recent --name limit-530 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 538 {"action":"pass","flow-limit":{"interval":5},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-531 + inet6/filter/FORWARD -j limit-531 + inet/filter/INPUT -j limit-531 + inet6/filter/INPUT -j limit-531 + inet/filter/OUTPUT -j limit-531 + inet6/filter/OUTPUT -j limit-531 + inet/filter/limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-180 + inet6/filter/limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-180 + inet/filter/logdrop-180 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-180 -m limit --limit 1/second -j LOG + inet/filter/logdrop-180 -j DROP + inet6/filter/logdrop-180 -j DROP + inet/filter/limit-531 -m recent --name limit-531 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-531 -m recent --name limit-531 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 539 {"flow-limit":{"interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-532 + inet6/filter/FORWARD -j limit-532 + inet/filter/INPUT -j limit-532 + inet6/filter/INPUT -j limit-532 + inet/filter/OUTPUT -j limit-532 + inet6/filter/OUTPUT -j limit-532 + inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-181 + inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-181 + inet/filter/logdrop-181 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-181 -m limit --limit 1/second -j LOG + inet/filter/logdrop-181 -j DROP + inet6/filter/logdrop-181 -j DROP + inet/filter/limit-532 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-532 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 540 {"action":"pass","flow-limit":{"interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-533 + inet6/filter/FORWARD -j limit-533 + inet/filter/INPUT -j limit-533 + inet6/filter/INPUT -j limit-533 + inet/filter/OUTPUT -j limit-533 + inet6/filter/OUTPUT -j limit-533 + inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-182 + inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-182 + inet/filter/logdrop-182 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-182 -m limit --limit 1/second -j LOG + inet/filter/logdrop-182 -j DROP + inet6/filter/logdrop-182 -j DROP + inet/filter/limit-533 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-533 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 541 {"flow-limit":{"interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-534 + inet6/filter/FORWARD -j limit-534 + inet/filter/INPUT -j limit-534 + inet6/filter/INPUT -j limit-534 + inet/filter/OUTPUT -j limit-534 + inet6/filter/OUTPUT -j limit-534 + inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-183 + inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-183 + inet/filter/logdrop-183 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-183 -m limit --limit 1/second -j LOG + inet/filter/logdrop-183 -j DROP + inet6/filter/logdrop-183 -j DROP + inet/filter/limit-534 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-534 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-29 + inet6/filter/FORWARD -j logaccept-final-29 + inet/filter/INPUT -j logaccept-final-29 + inet6/filter/INPUT -j logaccept-final-29 + inet/filter/OUTPUT -j logaccept-final-29 + inet6/filter/OUTPUT -j logaccept-final-29 + inet/filter/logaccept-final-29 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-29 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-29 -j ACCEPT + inet6/filter/logaccept-final-29 -j ACCEPT + +Filter 542 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-535 + inet6/filter/FORWARD -j limit-535 + inet/filter/INPUT -j limit-535 + inet6/filter/INPUT -j limit-535 + inet/filter/OUTPUT -j limit-535 + inet6/filter/OUTPUT -j limit-535 + inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-184 + inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-184 + inet/filter/logdrop-184 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-184 -m limit --limit 1/second -j LOG + inet/filter/logdrop-184 -j DROP + inet6/filter/logdrop-184 -j DROP + inet/filter/limit-535 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-535 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 543 {"flow-limit":{"interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-536 + inet6/filter/FORWARD -j limit-536 + inet/filter/INPUT -j limit-536 + inet6/filter/INPUT -j limit-536 + inet/filter/OUTPUT -j limit-536 + inet6/filter/OUTPUT -j limit-536 + inet/filter/limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-185 + inet6/filter/limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-185 + inet/filter/logdrop-185 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-185 -m limit --limit 1/second -j LOG + inet/filter/logdrop-185 -j DROP + inet6/filter/logdrop-185 -j DROP + inet/filter/limit-536 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-536 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 544 {"action":"pass","flow-limit":{"interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-537 + inet6/filter/FORWARD -j limit-537 + inet/filter/INPUT -j limit-537 + inet6/filter/INPUT -j limit-537 + inet/filter/OUTPUT -j limit-537 + inet6/filter/OUTPUT -j limit-537 + inet/filter/limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-186 + inet6/filter/limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-186 + inet/filter/logdrop-186 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-186 -m limit --limit 1/second -j LOG + inet/filter/logdrop-186 -j DROP + inet6/filter/logdrop-186 -j DROP + inet/filter/limit-537 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-537 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 545 {"flow-limit":{"interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-538 + inet6/filter/FORWARD -j limit-538 + inet/filter/INPUT -j limit-538 + inet6/filter/INPUT -j limit-538 + inet/filter/OUTPUT -j limit-538 + inet6/filter/OUTPUT -j limit-538 + inet/filter/limit-538 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-187 + inet6/filter/limit-538 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-187 + inet/filter/logdrop-187 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-187 -m limit --limit 1/second -j LOG + inet/filter/logdrop-187 -j DROP + inet6/filter/logdrop-187 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 546 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-539 + inet6/filter/FORWARD -j limit-539 + inet/filter/INPUT -j limit-539 + inet6/filter/INPUT -j limit-539 + inet/filter/OUTPUT -j limit-539 + inet6/filter/OUTPUT -j limit-539 + inet/filter/limit-539 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-188 + inet6/filter/limit-539 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-188 + inet/filter/logdrop-188 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-188 -m limit --limit 1/second -j LOG + inet/filter/logdrop-188 -j DROP + inet6/filter/logdrop-188 -j DROP + +Filter 547 {"flow-limit":{"interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-540 + inet6/filter/FORWARD -j limit-540 + inet/filter/INPUT -j limit-540 + inet6/filter/INPUT -j limit-540 + inet/filter/OUTPUT -j limit-540 + inet6/filter/OUTPUT -j limit-540 + inet/filter/limit-540 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-189 + inet6/filter/limit-540 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-189 + inet/filter/logdrop-189 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-189 -m limit --limit 1/second -j LOG + inet/filter/logdrop-189 -j DROP + inet6/filter/logdrop-189 -j DROP + inet/filter/FORWARD -j logaccept-final-30 + inet6/filter/FORWARD -j logaccept-final-30 + inet/filter/INPUT -j logaccept-final-30 + inet6/filter/INPUT -j logaccept-final-30 + inet/filter/OUTPUT -j logaccept-final-30 + inet6/filter/OUTPUT -j logaccept-final-30 + inet/filter/logaccept-final-30 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-30 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-30 -j ACCEPT + inet6/filter/logaccept-final-30 -j ACCEPT + +Filter 548 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-541 + inet6/filter/FORWARD -j limit-541 + inet/filter/INPUT -j limit-541 + inet6/filter/INPUT -j limit-541 + inet/filter/OUTPUT -j limit-541 + inet6/filter/OUTPUT -j limit-541 + inet/filter/limit-541 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-190 + inet6/filter/limit-541 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-190 + inet/filter/logdrop-190 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-190 -m limit --limit 1/second -j LOG + inet/filter/logdrop-190 -j DROP + inet6/filter/logdrop-190 -j DROP + inet/filter/limit-541 -m limit --limit 1/second -j LOG + inet6/filter/limit-541 -m limit --limit 1/second -j LOG + +Filter 549 {"flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-542 + inet6/filter/FORWARD -j limit-542 + inet/filter/INPUT -j limit-542 + inet6/filter/INPUT -j limit-542 + inet/filter/OUTPUT -j limit-542 + inet6/filter/OUTPUT -j limit-542 + inet/filter/limit-542 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-191 + inet6/filter/limit-542 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-191 + inet/filter/logdrop-191 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-191 -m limit --limit 1/second -j LOG + inet/filter/logdrop-191 -j DROP + inet6/filter/logdrop-191 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 550 {"action":"pass","flow-limit":{"interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-543 + inet6/filter/FORWARD -j limit-543 + inet/filter/INPUT -j limit-543 + inet6/filter/INPUT -j limit-543 + inet/filter/OUTPUT -j limit-543 + inet6/filter/OUTPUT -j limit-543 + inet/filter/limit-543 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-192 + inet6/filter/limit-543 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-192 + inet/filter/logdrop-192 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-192 -m limit --limit 1/second -j LOG + inet/filter/logdrop-192 -j DROP + inet6/filter/logdrop-192 -j DROP + +Filter 551 {"flow-limit":{"addr":"dest","interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-544 + inet6/filter/FORWARD -j limit-544 + inet/filter/INPUT -j limit-544 + inet6/filter/INPUT -j limit-544 + inet/filter/OUTPUT -j limit-544 + inet6/filter/OUTPUT -j limit-544 + inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-193 + inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-193 + inet/filter/logdrop-193 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-193 -m limit --limit 1/second -j LOG + inet/filter/logdrop-193 -j DROP + inet6/filter/logdrop-193 -j DROP + inet/filter/limit-544 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-544 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 552 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-545 + inet6/filter/FORWARD -j limit-545 + inet/filter/INPUT -j limit-545 + inet6/filter/INPUT -j limit-545 + inet/filter/OUTPUT -j limit-545 + inet6/filter/OUTPUT -j limit-545 + inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-194 + inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-194 + inet/filter/logdrop-194 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-194 -m limit --limit 1/second -j LOG + inet/filter/logdrop-194 -j DROP + inet6/filter/logdrop-194 -j DROP + inet/filter/limit-545 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-545 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 553 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-546 + inet6/filter/FORWARD -j limit-546 + inet/filter/INPUT -j limit-546 + inet6/filter/INPUT -j limit-546 + inet/filter/OUTPUT -j limit-546 + inet6/filter/OUTPUT -j limit-546 + inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-195 + inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-195 + inet/filter/logdrop-195 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-195 -m limit --limit 1/second -j LOG + inet/filter/logdrop-195 -j DROP + inet6/filter/logdrop-195 -j DROP + inet/filter/limit-546 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-546 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-31 + inet6/filter/FORWARD -j logaccept-final-31 + inet/filter/INPUT -j logaccept-final-31 + inet6/filter/INPUT -j logaccept-final-31 + inet/filter/OUTPUT -j logaccept-final-31 + inet6/filter/OUTPUT -j logaccept-final-31 + inet/filter/logaccept-final-31 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-31 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-31 -j ACCEPT + inet6/filter/logaccept-final-31 -j ACCEPT + +Filter 554 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-547 + inet6/filter/FORWARD -j limit-547 + inet/filter/INPUT -j limit-547 + inet6/filter/INPUT -j limit-547 + inet/filter/OUTPUT -j limit-547 + inet6/filter/OUTPUT -j limit-547 + inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-196 + inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-196 + inet/filter/logdrop-196 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-196 -m limit --limit 1/second -j LOG + inet/filter/logdrop-196 -j DROP + inet6/filter/logdrop-196 -j DROP + inet/filter/limit-547 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-547 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 555 {"flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-548 + inet6/filter/FORWARD -j limit-548 + inet/filter/INPUT -j limit-548 + inet6/filter/INPUT -j limit-548 + inet/filter/OUTPUT -j limit-548 + inet6/filter/OUTPUT -j limit-548 + inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-197 + inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-197 + inet/filter/logdrop-197 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-197 -m limit --limit 1/second -j LOG + inet/filter/logdrop-197 -j DROP + inet6/filter/logdrop-197 -j DROP + inet/filter/limit-548 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-548 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 556 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-549 + inet6/filter/FORWARD -j limit-549 + inet/filter/INPUT -j limit-549 + inet6/filter/INPUT -j limit-549 + inet/filter/OUTPUT -j limit-549 + inet6/filter/OUTPUT -j limit-549 + inet/filter/limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j logdrop-198 + inet6/filter/limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j logdrop-198 + inet/filter/logdrop-198 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-198 -m limit --limit 1/second -j LOG + inet/filter/logdrop-198 -j DROP + inet6/filter/logdrop-198 -j DROP + inet/filter/limit-549 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-549 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 557 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-550 + inet6/filter/FORWARD -j limit-550 + inet/filter/INPUT -j limit-550 + inet6/filter/INPUT -j limit-550 + inet/filter/OUTPUT -j limit-550 + inet6/filter/OUTPUT -j limit-550 + inet/filter/limit-550 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-199 + inet6/filter/limit-550 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-199 + inet/filter/logdrop-199 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-199 -m limit --limit 1/second -j LOG + inet/filter/logdrop-199 -j DROP + inet6/filter/logdrop-199 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 558 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-551 + inet6/filter/FORWARD -j limit-551 + inet/filter/INPUT -j limit-551 + inet6/filter/INPUT -j limit-551 + inet/filter/OUTPUT -j limit-551 + inet6/filter/OUTPUT -j limit-551 + inet/filter/limit-551 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-200 + inet6/filter/limit-551 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-200 + inet/filter/logdrop-200 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-200 -m limit --limit 1/second -j LOG + inet/filter/logdrop-200 -j DROP + inet6/filter/logdrop-200 -j DROP + +Filter 559 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-552 + inet6/filter/FORWARD -j limit-552 + inet/filter/INPUT -j limit-552 + inet6/filter/INPUT -j limit-552 + inet/filter/OUTPUT -j limit-552 + inet6/filter/OUTPUT -j limit-552 + inet/filter/limit-552 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-201 + inet6/filter/limit-552 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-201 + inet/filter/logdrop-201 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-201 -m limit --limit 1/second -j LOG + inet/filter/logdrop-201 -j DROP + inet6/filter/logdrop-201 -j DROP + inet/filter/FORWARD -j logaccept-final-32 + inet6/filter/FORWARD -j logaccept-final-32 + inet/filter/INPUT -j logaccept-final-32 + inet6/filter/INPUT -j logaccept-final-32 + inet/filter/OUTPUT -j logaccept-final-32 + inet6/filter/OUTPUT -j logaccept-final-32 + inet/filter/logaccept-final-32 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-32 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-32 -j ACCEPT + inet6/filter/logaccept-final-32 -j ACCEPT + +Filter 560 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-553 + inet6/filter/FORWARD -j limit-553 + inet/filter/INPUT -j limit-553 + inet6/filter/INPUT -j limit-553 + inet/filter/OUTPUT -j limit-553 + inet6/filter/OUTPUT -j limit-553 + inet/filter/limit-553 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-202 + inet6/filter/limit-553 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-202 + inet/filter/logdrop-202 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-202 -m limit --limit 1/second -j LOG + inet/filter/logdrop-202 -j DROP + inet6/filter/logdrop-202 -j DROP + inet/filter/limit-553 -m limit --limit 1/second -j LOG + inet6/filter/limit-553 -m limit --limit 1/second -j LOG + +Filter 561 {"flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-554 + inet6/filter/FORWARD -j limit-554 + inet/filter/INPUT -j limit-554 + inet6/filter/INPUT -j limit-554 + inet/filter/OUTPUT -j limit-554 + inet6/filter/OUTPUT -j limit-554 + inet/filter/limit-554 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-203 + inet6/filter/limit-554 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-203 + inet/filter/logdrop-203 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-203 -m limit --limit 1/second -j LOG + inet/filter/logdrop-203 -j DROP + inet6/filter/logdrop-203 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 562 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-555 + inet6/filter/FORWARD -j limit-555 + inet/filter/INPUT -j limit-555 + inet6/filter/INPUT -j limit-555 + inet/filter/OUTPUT -j limit-555 + inet6/filter/OUTPUT -j limit-555 + inet/filter/limit-555 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-204 + inet6/filter/limit-555 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-204 + inet/filter/logdrop-204 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-204 -m limit --limit 1/second -j LOG + inet/filter/logdrop-204 -j DROP + inet6/filter/logdrop-204 -j DROP + +Filter 563 {"flow-limit":{"interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-556 + inet6/filter/FORWARD -j limit-556 + inet/filter/INPUT -j limit-556 + inet6/filter/INPUT -j limit-556 + inet/filter/OUTPUT -j limit-556 + inet6/filter/OUTPUT -j limit-556 + inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-205 + inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-205 + inet/filter/logdrop-205 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-205 -m limit --limit 1/second -j LOG + inet/filter/logdrop-205 -j DROP + inet6/filter/logdrop-205 -j DROP + inet/filter/limit-556 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-556 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 564 {"action":"pass","flow-limit":{"interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-557 + inet6/filter/FORWARD -j limit-557 + inet/filter/INPUT -j limit-557 + inet6/filter/INPUT -j limit-557 + inet/filter/OUTPUT -j limit-557 + inet6/filter/OUTPUT -j limit-557 + inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-206 + inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-206 + inet/filter/logdrop-206 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-206 -m limit --limit 1/second -j LOG + inet/filter/logdrop-206 -j DROP + inet6/filter/logdrop-206 -j DROP + inet/filter/limit-557 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-557 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 565 {"flow-limit":{"interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-558 + inet6/filter/FORWARD -j limit-558 + inet/filter/INPUT -j limit-558 + inet6/filter/INPUT -j limit-558 + inet/filter/OUTPUT -j limit-558 + inet6/filter/OUTPUT -j limit-558 + inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-207 + inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-207 + inet/filter/logdrop-207 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-207 -m limit --limit 1/second -j LOG + inet/filter/logdrop-207 -j DROP + inet6/filter/logdrop-207 -j DROP + inet/filter/limit-558 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-558 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-33 + inet6/filter/FORWARD -j logaccept-final-33 + inet/filter/INPUT -j logaccept-final-33 + inet6/filter/INPUT -j logaccept-final-33 + inet/filter/OUTPUT -j logaccept-final-33 + inet6/filter/OUTPUT -j logaccept-final-33 + inet/filter/logaccept-final-33 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-33 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-33 -j ACCEPT + inet6/filter/logaccept-final-33 -j ACCEPT + +Filter 566 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-559 + inet6/filter/FORWARD -j limit-559 + inet/filter/INPUT -j limit-559 + inet6/filter/INPUT -j limit-559 + inet/filter/OUTPUT -j limit-559 + inet6/filter/OUTPUT -j limit-559 + inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-208 + inet6/filter/limit-559 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-208 + inet/filter/logdrop-208 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-208 -m limit --limit 1/second -j LOG + inet/filter/logdrop-208 -j DROP + inet6/filter/logdrop-208 -j DROP + inet/filter/limit-559 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-559 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 567 {"flow-limit":{"interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-560 + inet6/filter/FORWARD -j limit-560 + inet/filter/INPUT -j limit-560 + inet6/filter/INPUT -j limit-560 + inet/filter/OUTPUT -j limit-560 + inet6/filter/OUTPUT -j limit-560 + inet/filter/limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-209 + inet6/filter/limit-560 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-209 + inet/filter/logdrop-209 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-209 -m limit --limit 1/second -j LOG + inet/filter/logdrop-209 -j DROP + inet6/filter/logdrop-209 -j DROP + inet/filter/limit-560 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-560 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 568 {"action":"pass","flow-limit":{"interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-561 + inet6/filter/FORWARD -j limit-561 + inet/filter/INPUT -j limit-561 + inet6/filter/INPUT -j limit-561 + inet/filter/OUTPUT -j limit-561 + inet6/filter/OUTPUT -j limit-561 + inet/filter/limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-210 + inet6/filter/limit-561 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-210 + inet/filter/logdrop-210 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-210 -m limit --limit 1/second -j LOG + inet/filter/logdrop-210 -j DROP + inet6/filter/logdrop-210 -j DROP + inet/filter/limit-561 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-561 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 569 {"flow-limit":{"interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-562 + inet6/filter/FORWARD -j limit-562 + inet/filter/INPUT -j limit-562 + inet6/filter/INPUT -j limit-562 + inet/filter/OUTPUT -j limit-562 + inet6/filter/OUTPUT -j limit-562 + inet/filter/limit-562 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-211 + inet6/filter/limit-562 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-211 + inet/filter/logdrop-211 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-211 -m limit --limit 1/second -j LOG + inet/filter/logdrop-211 -j DROP + inet6/filter/logdrop-211 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 570 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-563 + inet6/filter/FORWARD -j limit-563 + inet/filter/INPUT -j limit-563 + inet6/filter/INPUT -j limit-563 + inet/filter/OUTPUT -j limit-563 + inet6/filter/OUTPUT -j limit-563 + inet/filter/limit-563 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-212 + inet6/filter/limit-563 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-212 + inet/filter/logdrop-212 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-212 -m limit --limit 1/second -j LOG + inet/filter/logdrop-212 -j DROP + inet6/filter/logdrop-212 -j DROP + +Filter 571 {"flow-limit":{"interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-564 + inet6/filter/FORWARD -j limit-564 + inet/filter/INPUT -j limit-564 + inet6/filter/INPUT -j limit-564 + inet/filter/OUTPUT -j limit-564 + inet6/filter/OUTPUT -j limit-564 + inet/filter/limit-564 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-213 + inet6/filter/limit-564 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-213 + inet/filter/logdrop-213 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-213 -m limit --limit 1/second -j LOG + inet/filter/logdrop-213 -j DROP + inet6/filter/logdrop-213 -j DROP + inet/filter/FORWARD -j logaccept-final-34 + inet6/filter/FORWARD -j logaccept-final-34 + inet/filter/INPUT -j logaccept-final-34 + inet6/filter/INPUT -j logaccept-final-34 + inet/filter/OUTPUT -j logaccept-final-34 + inet6/filter/OUTPUT -j logaccept-final-34 + inet/filter/logaccept-final-34 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-34 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-34 -j ACCEPT + inet6/filter/logaccept-final-34 -j ACCEPT + +Filter 572 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-565 + inet6/filter/FORWARD -j limit-565 + inet/filter/INPUT -j limit-565 + inet6/filter/INPUT -j limit-565 + inet/filter/OUTPUT -j limit-565 + inet6/filter/OUTPUT -j limit-565 + inet/filter/limit-565 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-214 + inet6/filter/limit-565 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-214 + inet/filter/logdrop-214 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-214 -m limit --limit 1/second -j LOG + inet/filter/logdrop-214 -j DROP + inet6/filter/logdrop-214 -j DROP + inet/filter/limit-565 -m limit --limit 1/second -j LOG + inet6/filter/limit-565 -m limit --limit 1/second -j LOG + +Filter 573 {"flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-566 + inet6/filter/FORWARD -j limit-566 + inet/filter/INPUT -j limit-566 + inet6/filter/INPUT -j limit-566 + inet/filter/OUTPUT -j limit-566 + inet6/filter/OUTPUT -j limit-566 + inet/filter/limit-566 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-215 + inet6/filter/limit-566 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-215 + inet/filter/logdrop-215 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-215 -m limit --limit 1/second -j LOG + inet/filter/logdrop-215 -j DROP + inet6/filter/logdrop-215 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 574 {"action":"pass","flow-limit":{"interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-567 + inet6/filter/FORWARD -j limit-567 + inet/filter/INPUT -j limit-567 + inet6/filter/INPUT -j limit-567 + inet/filter/OUTPUT -j limit-567 + inet6/filter/OUTPUT -j limit-567 + inet/filter/limit-567 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-216 + inet6/filter/limit-567 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-216 + inet/filter/logdrop-216 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-216 -m limit --limit 1/second -j LOG + inet/filter/logdrop-216 -j DROP + inet6/filter/logdrop-216 -j DROP + +Filter 575 {"flow-limit":{"addr":"dest","interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-568 + inet6/filter/FORWARD -j limit-568 + inet/filter/INPUT -j limit-568 + inet6/filter/INPUT -j limit-568 + inet/filter/OUTPUT -j limit-568 + inet6/filter/OUTPUT -j limit-568 + inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-217 + inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-217 + inet/filter/logdrop-217 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-217 -m limit --limit 1/second -j LOG + inet/filter/logdrop-217 -j DROP + inet6/filter/logdrop-217 -j DROP + inet/filter/limit-568 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-568 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 576 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-569 + inet6/filter/FORWARD -j limit-569 + inet/filter/INPUT -j limit-569 + inet6/filter/INPUT -j limit-569 + inet/filter/OUTPUT -j limit-569 + inet6/filter/OUTPUT -j limit-569 + inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-218 + inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-218 + inet/filter/logdrop-218 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-218 -m limit --limit 1/second -j LOG + inet/filter/logdrop-218 -j DROP + inet6/filter/logdrop-218 -j DROP + inet/filter/limit-569 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-569 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 577 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-570 + inet6/filter/FORWARD -j limit-570 + inet/filter/INPUT -j limit-570 + inet6/filter/INPUT -j limit-570 + inet/filter/OUTPUT -j limit-570 + inet6/filter/OUTPUT -j limit-570 + inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-219 + inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-219 + inet/filter/logdrop-219 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-219 -m limit --limit 1/second -j LOG + inet/filter/logdrop-219 -j DROP + inet6/filter/logdrop-219 -j DROP + inet/filter/limit-570 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-570 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-35 + inet6/filter/FORWARD -j logaccept-final-35 + inet/filter/INPUT -j logaccept-final-35 + inet6/filter/INPUT -j logaccept-final-35 + inet/filter/OUTPUT -j logaccept-final-35 + inet6/filter/OUTPUT -j logaccept-final-35 + inet/filter/logaccept-final-35 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-35 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-35 -j ACCEPT + inet6/filter/logaccept-final-35 -j ACCEPT + +Filter 578 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-571 + inet6/filter/FORWARD -j limit-571 + inet/filter/INPUT -j limit-571 + inet6/filter/INPUT -j limit-571 + inet/filter/OUTPUT -j limit-571 + inet6/filter/OUTPUT -j limit-571 + inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-220 + inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-220 + inet/filter/logdrop-220 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-220 -m limit --limit 1/second -j LOG + inet/filter/logdrop-220 -j DROP + inet6/filter/logdrop-220 -j DROP + inet/filter/limit-571 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-571 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 579 {"flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-572 + inet6/filter/FORWARD -j limit-572 + inet/filter/INPUT -j limit-572 + inet6/filter/INPUT -j limit-572 + inet/filter/OUTPUT -j limit-572 + inet6/filter/OUTPUT -j limit-572 + inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-221 + inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-221 + inet/filter/logdrop-221 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-221 -m limit --limit 1/second -j LOG + inet/filter/logdrop-221 -j DROP + inet6/filter/logdrop-221 -j DROP + inet/filter/limit-572 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-572 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 580 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-573 + inet6/filter/FORWARD -j limit-573 + inet/filter/INPUT -j limit-573 + inet6/filter/INPUT -j limit-573 + inet/filter/OUTPUT -j limit-573 + inet6/filter/OUTPUT -j limit-573 + inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j logdrop-222 + inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j logdrop-222 + inet/filter/logdrop-222 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-222 -m limit --limit 1/second -j LOG + inet/filter/logdrop-222 -j DROP + inet6/filter/logdrop-222 -j DROP + inet/filter/limit-573 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-573 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 581 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-574 + inet6/filter/FORWARD -j limit-574 + inet/filter/INPUT -j limit-574 + inet6/filter/INPUT -j limit-574 + inet/filter/OUTPUT -j limit-574 + inet6/filter/OUTPUT -j limit-574 + inet/filter/limit-574 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-223 + inet6/filter/limit-574 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-223 + inet/filter/logdrop-223 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-223 -m limit --limit 1/second -j LOG + inet/filter/logdrop-223 -j DROP + inet6/filter/logdrop-223 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 582 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-575 + inet6/filter/FORWARD -j limit-575 + inet/filter/INPUT -j limit-575 + inet6/filter/INPUT -j limit-575 + inet/filter/OUTPUT -j limit-575 + inet6/filter/OUTPUT -j limit-575 + inet/filter/limit-575 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-224 + inet6/filter/limit-575 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-224 + inet/filter/logdrop-224 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-224 -m limit --limit 1/second -j LOG + inet/filter/logdrop-224 -j DROP + inet6/filter/logdrop-224 -j DROP + +Filter 583 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-576 + inet6/filter/FORWARD -j limit-576 + inet/filter/INPUT -j limit-576 + inet6/filter/INPUT -j limit-576 + inet/filter/OUTPUT -j limit-576 + inet6/filter/OUTPUT -j limit-576 + inet/filter/limit-576 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-225 + inet6/filter/limit-576 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-225 + inet/filter/logdrop-225 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-225 -m limit --limit 1/second -j LOG + inet/filter/logdrop-225 -j DROP + inet6/filter/logdrop-225 -j DROP + inet/filter/FORWARD -j logaccept-final-36 + inet6/filter/FORWARD -j logaccept-final-36 + inet/filter/INPUT -j logaccept-final-36 + inet6/filter/INPUT -j logaccept-final-36 + inet/filter/OUTPUT -j logaccept-final-36 + inet6/filter/OUTPUT -j logaccept-final-36 + inet/filter/logaccept-final-36 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-36 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-36 -j ACCEPT + inet6/filter/logaccept-final-36 -j ACCEPT + +Filter 584 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-577 + inet6/filter/FORWARD -j limit-577 + inet/filter/INPUT -j limit-577 + inet6/filter/INPUT -j limit-577 + inet/filter/OUTPUT -j limit-577 + inet6/filter/OUTPUT -j limit-577 + inet/filter/limit-577 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-226 + inet6/filter/limit-577 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-226 + inet/filter/logdrop-226 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-226 -m limit --limit 1/second -j LOG + inet/filter/logdrop-226 -j DROP + inet6/filter/logdrop-226 -j DROP + inet/filter/limit-577 -m limit --limit 1/second -j LOG + inet6/filter/limit-577 -m limit --limit 1/second -j LOG + +Filter 585 {"flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-578 + inet6/filter/FORWARD -j limit-578 + inet/filter/INPUT -j limit-578 + inet6/filter/INPUT -j limit-578 + inet/filter/OUTPUT -j limit-578 + inet6/filter/OUTPUT -j limit-578 + inet/filter/limit-578 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-227 + inet6/filter/limit-578 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-227 + inet/filter/logdrop-227 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-227 -m limit --limit 1/second -j LOG + inet/filter/logdrop-227 -j DROP + inet6/filter/logdrop-227 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 586 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-579 + inet6/filter/FORWARD -j limit-579 + inet/filter/INPUT -j limit-579 + inet6/filter/INPUT -j limit-579 + inet/filter/OUTPUT -j limit-579 + inet6/filter/OUTPUT -j limit-579 + inet/filter/limit-579 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-228 + inet6/filter/limit-579 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-228 + inet/filter/logdrop-228 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-228 -m limit --limit 1/second -j LOG + inet/filter/logdrop-228 -j DROP + inet6/filter/logdrop-228 -j DROP + +Filter 587 {"flow-limit":{"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-580 + inet6/filter/FORWARD -j limit-580 + inet/filter/INPUT -j limit-580 + inet6/filter/INPUT -j limit-580 + inet/filter/OUTPUT -j limit-580 + inet6/filter/OUTPUT -j limit-580 + inet/filter/limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-580 -m recent --name limit-580 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-580 -m recent --name limit-580 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 588 {"action":"pass","flow-limit":{"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-581 + inet6/filter/FORWARD -j limit-581 + inet/filter/INPUT -j limit-581 + inet6/filter/INPUT -j limit-581 + inet/filter/OUTPUT -j limit-581 + inet6/filter/OUTPUT -j limit-581 + inet/filter/limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-581 -m recent --name limit-581 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-581 -m recent --name limit-581 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 589 {"flow-limit":{"interval":5,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-582 + inet6/filter/FORWARD -j limit-582 + inet/filter/INPUT -j limit-582 + inet6/filter/INPUT -j limit-582 + inet/filter/OUTPUT -j limit-582 + inet6/filter/OUTPUT -j limit-582 + inet/filter/limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-582 -m recent --name limit-582 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-582 -m recent --name limit-582 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-37 + inet6/filter/FORWARD -j logaccept-final-37 + inet/filter/INPUT -j logaccept-final-37 + inet6/filter/INPUT -j logaccept-final-37 + inet/filter/OUTPUT -j logaccept-final-37 + inet6/filter/OUTPUT -j logaccept-final-37 + inet/filter/logaccept-final-37 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-37 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-37 -j ACCEPT + inet6/filter/logaccept-final-37 -j ACCEPT + +Filter 590 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-583 + inet6/filter/FORWARD -j limit-583 + inet/filter/INPUT -j limit-583 + inet6/filter/INPUT -j limit-583 + inet/filter/OUTPUT -j limit-583 + inet6/filter/OUTPUT -j limit-583 + inet/filter/limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-583 -m recent --name limit-583 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-583 -m recent --name limit-583 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 591 {"flow-limit":{"interval":5,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-584 + inet6/filter/FORWARD -j limit-584 + inet/filter/INPUT -j limit-584 + inet6/filter/INPUT -j limit-584 + inet/filter/OUTPUT -j limit-584 + inet6/filter/OUTPUT -j limit-584 + inet/filter/limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-584 -m recent --name limit-584 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-584 -m recent --name limit-584 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 592 {"action":"pass","flow-limit":{"interval":5,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-585 + inet6/filter/FORWARD -j limit-585 + inet/filter/INPUT -j limit-585 + inet6/filter/INPUT -j limit-585 + inet/filter/OUTPUT -j limit-585 + inet6/filter/OUTPUT -j limit-585 + inet/filter/limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-585 -m recent --name limit-585 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-585 -m recent --name limit-585 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 593 {"flow-limit":{"interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-586 + inet6/filter/FORWARD -j limit-586 + inet/filter/INPUT -j limit-586 + inet6/filter/INPUT -j limit-586 + inet/filter/OUTPUT -j limit-586 + inet6/filter/OUTPUT -j limit-586 + inet/filter/limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-586 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-586 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 594 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-587 + inet6/filter/FORWARD -j limit-587 + inet/filter/INPUT -j limit-587 + inet6/filter/INPUT -j limit-587 + inet/filter/OUTPUT -j limit-587 + inet6/filter/OUTPUT -j limit-587 + inet/filter/limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-587 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-587 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 595 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-588 + inet6/filter/FORWARD -j limit-588 + inet/filter/INPUT -j limit-588 + inet6/filter/INPUT -j limit-588 + inet/filter/OUTPUT -j limit-588 + inet6/filter/OUTPUT -j limit-588 + inet/filter/limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-588 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-588 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-38 + inet6/filter/FORWARD -j logaccept-final-38 + inet/filter/INPUT -j logaccept-final-38 + inet6/filter/INPUT -j logaccept-final-38 + inet/filter/OUTPUT -j logaccept-final-38 + inet6/filter/OUTPUT -j logaccept-final-38 + inet/filter/logaccept-final-38 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-38 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-38 -j ACCEPT + inet6/filter/logaccept-final-38 -j ACCEPT + +Filter 596 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-589 + inet6/filter/FORWARD -j limit-589 + inet/filter/INPUT -j limit-589 + inet6/filter/INPUT -j limit-589 + inet/filter/OUTPUT -j limit-589 + inet6/filter/OUTPUT -j limit-589 + inet/filter/limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-589 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-589 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 597 {"flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-590 + inet6/filter/FORWARD -j limit-590 + inet/filter/INPUT -j limit-590 + inet6/filter/INPUT -j limit-590 + inet/filter/OUTPUT -j limit-590 + inet6/filter/OUTPUT -j limit-590 + inet/filter/limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-590 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-590 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 598 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-591 + inet6/filter/FORWARD -j limit-591 + inet/filter/INPUT -j limit-591 + inet6/filter/INPUT -j limit-591 + inet/filter/OUTPUT -j limit-591 + inet6/filter/OUTPUT -j limit-591 + inet/filter/limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-591 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-591 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 599 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-592 + inet6/filter/FORWARD -j limit-592 + inet/filter/INPUT -j limit-592 + inet6/filter/INPUT -j limit-592 + inet/filter/OUTPUT -j limit-592 + inet6/filter/OUTPUT -j limit-592 + inet/filter/limit-592 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-592 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 600 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-593 + inet6/filter/FORWARD -j limit-593 + inet/filter/INPUT -j limit-593 + inet6/filter/INPUT -j limit-593 + inet/filter/OUTPUT -j limit-593 + inet6/filter/OUTPUT -j limit-593 + inet/filter/limit-593 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-593 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 601 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-594 + inet6/filter/FORWARD -j limit-594 + inet/filter/INPUT -j limit-594 + inet6/filter/INPUT -j limit-594 + inet/filter/OUTPUT -j limit-594 + inet6/filter/OUTPUT -j limit-594 + inet/filter/limit-594 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-594 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-39 + inet6/filter/FORWARD -j logaccept-final-39 + inet/filter/INPUT -j logaccept-final-39 + inet6/filter/INPUT -j logaccept-final-39 + inet/filter/OUTPUT -j logaccept-final-39 + inet6/filter/OUTPUT -j logaccept-final-39 + inet/filter/logaccept-final-39 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-39 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-39 -j ACCEPT + inet6/filter/logaccept-final-39 -j ACCEPT + +Filter 602 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-595 + inet6/filter/FORWARD -j limit-595 + inet/filter/INPUT -j limit-595 + inet6/filter/INPUT -j limit-595 + inet/filter/OUTPUT -j limit-595 + inet6/filter/OUTPUT -j limit-595 + inet/filter/limit-595 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-595 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-595 -m limit --limit 1/second -j LOG + inet6/filter/limit-595 -m limit --limit 1/second -j LOG + +Filter 603 {"flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-596 + inet6/filter/FORWARD -j limit-596 + inet/filter/INPUT -j limit-596 + inet6/filter/INPUT -j limit-596 + inet/filter/OUTPUT -j limit-596 + inet6/filter/OUTPUT -j limit-596 + inet/filter/limit-596 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-596 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 604 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-597 + inet6/filter/FORWARD -j limit-597 + inet/filter/INPUT -j limit-597 + inet6/filter/INPUT -j limit-597 + inet/filter/OUTPUT -j limit-597 + inet6/filter/OUTPUT -j limit-597 + inet/filter/limit-597 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-597 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 605 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-598 + inet6/filter/FORWARD -j limit-598 + inet/filter/INPUT -j limit-598 + inet6/filter/INPUT -j limit-598 + inet/filter/OUTPUT -j limit-598 + inet6/filter/OUTPUT -j limit-598 + inet/filter/limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-598 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-598 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 606 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-599 + inet6/filter/FORWARD -j limit-599 + inet/filter/INPUT -j limit-599 + inet6/filter/INPUT -j limit-599 + inet/filter/OUTPUT -j limit-599 + inet6/filter/OUTPUT -j limit-599 + inet/filter/limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-599 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-599 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 607 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-600 + inet6/filter/FORWARD -j limit-600 + inet/filter/INPUT -j limit-600 + inet6/filter/INPUT -j limit-600 + inet/filter/OUTPUT -j limit-600 + inet6/filter/OUTPUT -j limit-600 + inet/filter/limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-600 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-600 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-40 + inet6/filter/FORWARD -j logaccept-final-40 + inet/filter/INPUT -j logaccept-final-40 + inet6/filter/INPUT -j logaccept-final-40 + inet/filter/OUTPUT -j logaccept-final-40 + inet6/filter/OUTPUT -j logaccept-final-40 + inet/filter/logaccept-final-40 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-40 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-40 -j ACCEPT + inet6/filter/logaccept-final-40 -j ACCEPT + +Filter 608 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-601 + inet6/filter/FORWARD -j limit-601 + inet/filter/INPUT -j limit-601 + inet6/filter/INPUT -j limit-601 + inet/filter/OUTPUT -j limit-601 + inet6/filter/OUTPUT -j limit-601 + inet/filter/limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-601 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-601 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 609 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-602 + inet6/filter/FORWARD -j limit-602 + inet/filter/INPUT -j limit-602 + inet6/filter/INPUT -j limit-602 + inet/filter/OUTPUT -j limit-602 + inet6/filter/OUTPUT -j limit-602 + inet/filter/limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-602 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-602 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 610 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-603 + inet6/filter/FORWARD -j limit-603 + inet/filter/INPUT -j limit-603 + inet6/filter/INPUT -j limit-603 + inet/filter/OUTPUT -j limit-603 + inet6/filter/OUTPUT -j limit-603 + inet/filter/limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-603 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-603 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 611 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-604 + inet6/filter/FORWARD -j limit-604 + inet/filter/INPUT -j limit-604 + inet6/filter/INPUT -j limit-604 + inet/filter/OUTPUT -j limit-604 + inet6/filter/OUTPUT -j limit-604 + inet/filter/limit-604 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-604 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 612 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-605 + inet6/filter/FORWARD -j limit-605 + inet/filter/INPUT -j limit-605 + inet6/filter/INPUT -j limit-605 + inet/filter/OUTPUT -j limit-605 + inet6/filter/OUTPUT -j limit-605 + inet/filter/limit-605 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-605 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 613 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-606 + inet6/filter/FORWARD -j limit-606 + inet/filter/INPUT -j limit-606 + inet6/filter/INPUT -j limit-606 + inet/filter/OUTPUT -j limit-606 + inet6/filter/OUTPUT -j limit-606 + inet/filter/limit-606 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-606 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-41 + inet6/filter/FORWARD -j logaccept-final-41 + inet/filter/INPUT -j logaccept-final-41 + inet6/filter/INPUT -j logaccept-final-41 + inet/filter/OUTPUT -j logaccept-final-41 + inet6/filter/OUTPUT -j logaccept-final-41 + inet/filter/logaccept-final-41 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-41 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-41 -j ACCEPT + inet6/filter/logaccept-final-41 -j ACCEPT + +Filter 614 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-607 + inet6/filter/FORWARD -j limit-607 + inet/filter/INPUT -j limit-607 + inet6/filter/INPUT -j limit-607 + inet/filter/OUTPUT -j limit-607 + inet6/filter/OUTPUT -j limit-607 + inet/filter/limit-607 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-607 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-607 -m limit --limit 1/second -j LOG + inet6/filter/limit-607 -m limit --limit 1/second -j LOG + +Filter 615 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-608 + inet6/filter/FORWARD -j limit-608 + inet/filter/INPUT -j limit-608 + inet6/filter/INPUT -j limit-608 + inet/filter/OUTPUT -j limit-608 + inet6/filter/OUTPUT -j limit-608 + inet/filter/limit-608 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-608 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 616 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-609 + inet6/filter/FORWARD -j limit-609 + inet/filter/INPUT -j limit-609 + inet6/filter/INPUT -j limit-609 + inet/filter/OUTPUT -j limit-609 + inet6/filter/OUTPUT -j limit-609 + inet/filter/limit-609 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-609 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 617 {"flow-limit":{"interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-610 + inet6/filter/FORWARD -j limit-610 + inet/filter/INPUT -j limit-610 + inet6/filter/INPUT -j limit-610 + inet/filter/OUTPUT -j limit-610 + inet6/filter/OUTPUT -j limit-610 + inet/filter/limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-610 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-610 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-610 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 618 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-611 + inet6/filter/FORWARD -j limit-611 + inet/filter/INPUT -j limit-611 + inet6/filter/INPUT -j limit-611 + inet/filter/OUTPUT -j limit-611 + inet6/filter/OUTPUT -j limit-611 + inet/filter/limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-611 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-611 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-611 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 619 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-612 + inet6/filter/FORWARD -j limit-612 + inet/filter/INPUT -j limit-612 + inet6/filter/INPUT -j limit-612 + inet/filter/OUTPUT -j limit-612 + inet6/filter/OUTPUT -j limit-612 + inet/filter/limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-612 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-612 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-612 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-42 + inet6/filter/FORWARD -j logaccept-final-42 + inet/filter/INPUT -j logaccept-final-42 + inet6/filter/INPUT -j logaccept-final-42 + inet/filter/OUTPUT -j logaccept-final-42 + inet6/filter/OUTPUT -j logaccept-final-42 + inet/filter/logaccept-final-42 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-42 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-42 -j ACCEPT + inet6/filter/logaccept-final-42 -j ACCEPT + +Filter 620 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-613 + inet6/filter/FORWARD -j limit-613 + inet/filter/INPUT -j limit-613 + inet6/filter/INPUT -j limit-613 + inet/filter/OUTPUT -j limit-613 + inet6/filter/OUTPUT -j limit-613 + inet/filter/limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-613 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-613 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-613 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 621 {"flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-614 + inet6/filter/FORWARD -j limit-614 + inet/filter/INPUT -j limit-614 + inet6/filter/INPUT -j limit-614 + inet/filter/OUTPUT -j limit-614 + inet6/filter/OUTPUT -j limit-614 + inet/filter/limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-614 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-614 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-614 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 622 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-615 + inet6/filter/FORWARD -j limit-615 + inet/filter/INPUT -j limit-615 + inet6/filter/INPUT -j limit-615 + inet/filter/OUTPUT -j limit-615 + inet6/filter/OUTPUT -j limit-615 + inet/filter/limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-615 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-615 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-615 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 623 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-616 + inet6/filter/FORWARD -j limit-616 + inet/filter/INPUT -j limit-616 + inet6/filter/INPUT -j limit-616 + inet/filter/OUTPUT -j limit-616 + inet6/filter/OUTPUT -j limit-616 + inet/filter/limit-616 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-616 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 624 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-617 + inet6/filter/FORWARD -j limit-617 + inet/filter/INPUT -j limit-617 + inet6/filter/INPUT -j limit-617 + inet/filter/OUTPUT -j limit-617 + inet6/filter/OUTPUT -j limit-617 + inet/filter/limit-617 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-617 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 625 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-618 + inet6/filter/FORWARD -j limit-618 + inet/filter/INPUT -j limit-618 + inet6/filter/INPUT -j limit-618 + inet/filter/OUTPUT -j limit-618 + inet6/filter/OUTPUT -j limit-618 + inet/filter/limit-618 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-618 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-43 + inet6/filter/FORWARD -j logaccept-final-43 + inet/filter/INPUT -j logaccept-final-43 + inet6/filter/INPUT -j logaccept-final-43 + inet/filter/OUTPUT -j logaccept-final-43 + inet6/filter/OUTPUT -j logaccept-final-43 + inet/filter/logaccept-final-43 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-43 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-43 -j ACCEPT + inet6/filter/logaccept-final-43 -j ACCEPT + +Filter 626 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-619 + inet6/filter/FORWARD -j limit-619 + inet/filter/INPUT -j limit-619 + inet6/filter/INPUT -j limit-619 + inet/filter/OUTPUT -j limit-619 + inet6/filter/OUTPUT -j limit-619 + inet/filter/limit-619 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-619 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-619 -m limit --limit 1/second -j LOG + inet6/filter/limit-619 -m limit --limit 1/second -j LOG + +Filter 627 {"flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-620 + inet6/filter/FORWARD -j limit-620 + inet/filter/INPUT -j limit-620 + inet6/filter/INPUT -j limit-620 + inet/filter/OUTPUT -j limit-620 + inet6/filter/OUTPUT -j limit-620 + inet/filter/limit-620 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-620 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 628 {"action":"pass","flow-limit":{"interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-621 + inet6/filter/FORWARD -j limit-621 + inet/filter/INPUT -j limit-621 + inet6/filter/INPUT -j limit-621 + inet/filter/OUTPUT -j limit-621 + inet6/filter/OUTPUT -j limit-621 + inet/filter/limit-621 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-621 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 629 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-622 + inet6/filter/FORWARD -j limit-622 + inet/filter/INPUT -j limit-622 + inet6/filter/INPUT -j limit-622 + inet/filter/OUTPUT -j limit-622 + inet6/filter/OUTPUT -j limit-622 + inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-622 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-622 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 630 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-623 + inet6/filter/FORWARD -j limit-623 + inet/filter/INPUT -j limit-623 + inet6/filter/INPUT -j limit-623 + inet/filter/OUTPUT -j limit-623 + inet6/filter/OUTPUT -j limit-623 + inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-623 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-623 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 631 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-624 + inet6/filter/FORWARD -j limit-624 + inet/filter/INPUT -j limit-624 + inet6/filter/INPUT -j limit-624 + inet/filter/OUTPUT -j limit-624 + inet6/filter/OUTPUT -j limit-624 + inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-624 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-624 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-44 + inet6/filter/FORWARD -j logaccept-final-44 + inet/filter/INPUT -j logaccept-final-44 + inet6/filter/INPUT -j logaccept-final-44 + inet/filter/OUTPUT -j logaccept-final-44 + inet6/filter/OUTPUT -j logaccept-final-44 + inet/filter/logaccept-final-44 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-44 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-44 -j ACCEPT + inet6/filter/logaccept-final-44 -j ACCEPT + +Filter 632 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-625 + inet6/filter/FORWARD -j limit-625 + inet/filter/INPUT -j limit-625 + inet6/filter/INPUT -j limit-625 + inet/filter/OUTPUT -j limit-625 + inet6/filter/OUTPUT -j limit-625 + inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-625 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-625 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 633 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-626 + inet6/filter/FORWARD -j limit-626 + inet/filter/INPUT -j limit-626 + inet6/filter/INPUT -j limit-626 + inet/filter/OUTPUT -j limit-626 + inet6/filter/OUTPUT -j limit-626 + inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-626 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-626 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 634 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-627 + inet6/filter/FORWARD -j limit-627 + inet/filter/INPUT -j limit-627 + inet6/filter/INPUT -j limit-627 + inet/filter/OUTPUT -j limit-627 + inet6/filter/OUTPUT -j limit-627 + inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-627 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-627 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 635 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-628 + inet6/filter/FORWARD -j limit-628 + inet/filter/INPUT -j limit-628 + inet6/filter/INPUT -j limit-628 + inet/filter/OUTPUT -j limit-628 + inet6/filter/OUTPUT -j limit-628 + inet/filter/limit-628 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-628 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 636 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-629 + inet6/filter/FORWARD -j limit-629 + inet/filter/INPUT -j limit-629 + inet6/filter/INPUT -j limit-629 + inet/filter/OUTPUT -j limit-629 + inet6/filter/OUTPUT -j limit-629 + inet/filter/limit-629 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-629 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 637 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-630 + inet6/filter/FORWARD -j limit-630 + inet/filter/INPUT -j limit-630 + inet6/filter/INPUT -j limit-630 + inet/filter/OUTPUT -j limit-630 + inet6/filter/OUTPUT -j limit-630 + inet/filter/limit-630 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-630 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-45 + inet6/filter/FORWARD -j logaccept-final-45 + inet/filter/INPUT -j logaccept-final-45 + inet6/filter/INPUT -j logaccept-final-45 + inet/filter/OUTPUT -j logaccept-final-45 + inet6/filter/OUTPUT -j logaccept-final-45 + inet/filter/logaccept-final-45 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-45 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-45 -j ACCEPT + inet6/filter/logaccept-final-45 -j ACCEPT + +Filter 638 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-631 + inet6/filter/FORWARD -j limit-631 + inet/filter/INPUT -j limit-631 + inet6/filter/INPUT -j limit-631 + inet/filter/OUTPUT -j limit-631 + inet6/filter/OUTPUT -j limit-631 + inet/filter/limit-631 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-631 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-631 -m limit --limit 1/second -j LOG + inet6/filter/limit-631 -m limit --limit 1/second -j LOG + +Filter 639 {"flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-632 + inet6/filter/FORWARD -j limit-632 + inet/filter/INPUT -j limit-632 + inet6/filter/INPUT -j limit-632 + inet/filter/OUTPUT -j limit-632 + inet6/filter/OUTPUT -j limit-632 + inet/filter/limit-632 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-632 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 640 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":false,"name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-633 + inet6/filter/FORWARD -j limit-633 + inet/filter/INPUT -j limit-633 + inet6/filter/INPUT -j limit-633 + inet/filter/OUTPUT -j limit-633 + inet6/filter/OUTPUT -j limit-633 + inet/filter/limit-633 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-633 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 641 {"flow-limit":{"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-634 + inet6/filter/FORWARD -j limit-634 + inet/filter/INPUT -j limit-634 + inet6/filter/INPUT -j limit-634 + inet/filter/OUTPUT -j limit-634 + inet6/filter/OUTPUT -j limit-634 + inet/filter/limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-634 -m recent --name limit-634 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-634 -m recent --name limit-634 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 642 {"action":"pass","flow-limit":{"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-635 + inet6/filter/FORWARD -j limit-635 + inet/filter/INPUT -j limit-635 + inet6/filter/INPUT -j limit-635 + inet/filter/OUTPUT -j limit-635 + inet6/filter/OUTPUT -j limit-635 + inet/filter/limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-635 -m recent --name limit-635 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-635 -m recent --name limit-635 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 643 {"flow-limit":{"interval":5,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-636 + inet6/filter/FORWARD -j limit-636 + inet/filter/INPUT -j limit-636 + inet6/filter/INPUT -j limit-636 + inet/filter/OUTPUT -j limit-636 + inet6/filter/OUTPUT -j limit-636 + inet/filter/limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-636 -m recent --name limit-636 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-636 -m recent --name limit-636 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-46 + inet6/filter/FORWARD -j logaccept-final-46 + inet/filter/INPUT -j logaccept-final-46 + inet6/filter/INPUT -j logaccept-final-46 + inet/filter/OUTPUT -j logaccept-final-46 + inet6/filter/OUTPUT -j logaccept-final-46 + inet/filter/logaccept-final-46 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-46 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-46 -j ACCEPT + inet6/filter/logaccept-final-46 -j ACCEPT + +Filter 644 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-637 + inet6/filter/FORWARD -j limit-637 + inet/filter/INPUT -j limit-637 + inet6/filter/INPUT -j limit-637 + inet/filter/OUTPUT -j limit-637 + inet6/filter/OUTPUT -j limit-637 + inet/filter/limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-637 -m recent --name limit-637 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-637 -m recent --name limit-637 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 645 {"flow-limit":{"interval":5,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-638 + inet6/filter/FORWARD -j limit-638 + inet/filter/INPUT -j limit-638 + inet6/filter/INPUT -j limit-638 + inet/filter/OUTPUT -j limit-638 + inet6/filter/OUTPUT -j limit-638 + inet/filter/limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-638 -m recent --name limit-638 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-638 -m recent --name limit-638 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 646 {"action":"pass","flow-limit":{"interval":5,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-639 + inet6/filter/FORWARD -j limit-639 + inet/filter/INPUT -j limit-639 + inet6/filter/INPUT -j limit-639 + inet/filter/OUTPUT -j limit-639 + inet6/filter/OUTPUT -j limit-639 + inet/filter/limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-639 -m recent --name limit-639 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-639 -m recent --name limit-639 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 647 {"flow-limit":{"interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-640 + inet6/filter/FORWARD -j limit-640 + inet/filter/INPUT -j limit-640 + inet6/filter/INPUT -j limit-640 + inet/filter/OUTPUT -j limit-640 + inet6/filter/OUTPUT -j limit-640 + inet/filter/limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-640 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-640 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 648 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-641 + inet6/filter/FORWARD -j limit-641 + inet/filter/INPUT -j limit-641 + inet6/filter/INPUT -j limit-641 + inet/filter/OUTPUT -j limit-641 + inet6/filter/OUTPUT -j limit-641 + inet/filter/limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-641 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-641 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 649 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-642 + inet6/filter/FORWARD -j limit-642 + inet/filter/INPUT -j limit-642 + inet6/filter/INPUT -j limit-642 + inet/filter/OUTPUT -j limit-642 + inet6/filter/OUTPUT -j limit-642 + inet/filter/limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-642 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-642 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-47 + inet6/filter/FORWARD -j logaccept-final-47 + inet/filter/INPUT -j logaccept-final-47 + inet6/filter/INPUT -j logaccept-final-47 + inet/filter/OUTPUT -j logaccept-final-47 + inet6/filter/OUTPUT -j logaccept-final-47 + inet/filter/logaccept-final-47 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-47 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-47 -j ACCEPT + inet6/filter/logaccept-final-47 -j ACCEPT + +Filter 650 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-643 + inet6/filter/FORWARD -j limit-643 + inet/filter/INPUT -j limit-643 + inet6/filter/INPUT -j limit-643 + inet/filter/OUTPUT -j limit-643 + inet6/filter/OUTPUT -j limit-643 + inet/filter/limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-643 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-643 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 651 {"flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-644 + inet6/filter/FORWARD -j limit-644 + inet/filter/INPUT -j limit-644 + inet6/filter/INPUT -j limit-644 + inet/filter/OUTPUT -j limit-644 + inet6/filter/OUTPUT -j limit-644 + inet/filter/limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-644 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-644 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 652 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-645 + inet6/filter/FORWARD -j limit-645 + inet/filter/INPUT -j limit-645 + inet6/filter/INPUT -j limit-645 + inet/filter/OUTPUT -j limit-645 + inet6/filter/OUTPUT -j limit-645 + inet/filter/limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-645 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-645 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 653 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-646 + inet6/filter/FORWARD -j limit-646 + inet/filter/INPUT -j limit-646 + inet6/filter/INPUT -j limit-646 + inet/filter/OUTPUT -j limit-646 + inet6/filter/OUTPUT -j limit-646 + inet/filter/limit-646 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-646 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 654 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-647 + inet6/filter/FORWARD -j limit-647 + inet/filter/INPUT -j limit-647 + inet6/filter/INPUT -j limit-647 + inet/filter/OUTPUT -j limit-647 + inet6/filter/OUTPUT -j limit-647 + inet/filter/limit-647 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-647 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 655 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-648 + inet6/filter/FORWARD -j limit-648 + inet/filter/INPUT -j limit-648 + inet6/filter/INPUT -j limit-648 + inet/filter/OUTPUT -j limit-648 + inet6/filter/OUTPUT -j limit-648 + inet/filter/limit-648 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-648 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-48 + inet6/filter/FORWARD -j logaccept-final-48 + inet/filter/INPUT -j logaccept-final-48 + inet6/filter/INPUT -j logaccept-final-48 + inet/filter/OUTPUT -j logaccept-final-48 + inet6/filter/OUTPUT -j logaccept-final-48 + inet/filter/logaccept-final-48 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-48 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-48 -j ACCEPT + inet6/filter/logaccept-final-48 -j ACCEPT + +Filter 656 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-649 + inet6/filter/FORWARD -j limit-649 + inet/filter/INPUT -j limit-649 + inet6/filter/INPUT -j limit-649 + inet/filter/OUTPUT -j limit-649 + inet6/filter/OUTPUT -j limit-649 + inet/filter/limit-649 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-649 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-649 -m limit --limit 1/second -j LOG + inet6/filter/limit-649 -m limit --limit 1/second -j LOG + +Filter 657 {"flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-650 + inet6/filter/FORWARD -j limit-650 + inet/filter/INPUT -j limit-650 + inet6/filter/INPUT -j limit-650 + inet/filter/OUTPUT -j limit-650 + inet6/filter/OUTPUT -j limit-650 + inet/filter/limit-650 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-650 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 658 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-651 + inet6/filter/FORWARD -j limit-651 + inet/filter/INPUT -j limit-651 + inet6/filter/INPUT -j limit-651 + inet/filter/OUTPUT -j limit-651 + inet6/filter/OUTPUT -j limit-651 + inet/filter/limit-651 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-651 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 659 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-652 + inet6/filter/FORWARD -j limit-652 + inet/filter/INPUT -j limit-652 + inet6/filter/INPUT -j limit-652 + inet/filter/OUTPUT -j limit-652 + inet6/filter/OUTPUT -j limit-652 + inet/filter/limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-652 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-652 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 660 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"}} +(filter-limit) + inet/filter/FORWARD -j limit-653 + inet6/filter/FORWARD -j limit-653 + inet/filter/INPUT -j limit-653 + inet6/filter/INPUT -j limit-653 + inet/filter/OUTPUT -j limit-653 + inet6/filter/OUTPUT -j limit-653 + inet/filter/limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-653 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-653 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 661 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-654 + inet6/filter/FORWARD -j limit-654 + inet/filter/INPUT -j limit-654 + inet6/filter/INPUT -j limit-654 + inet/filter/OUTPUT -j limit-654 + inet6/filter/OUTPUT -j limit-654 + inet/filter/limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-654 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-654 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j logaccept-final-49 + inet6/filter/FORWARD -j logaccept-final-49 + inet/filter/INPUT -j logaccept-final-49 + inet6/filter/INPUT -j logaccept-final-49 + inet/filter/OUTPUT -j logaccept-final-49 + inet6/filter/OUTPUT -j logaccept-final-49 + inet/filter/logaccept-final-49 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-49 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-49 -j ACCEPT + inet6/filter/logaccept-final-49 -j ACCEPT + +Filter 662 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-655 + inet6/filter/FORWARD -j limit-655 + inet/filter/INPUT -j limit-655 + inet6/filter/INPUT -j limit-655 + inet/filter/OUTPUT -j limit-655 + inet6/filter/OUTPUT -j limit-655 + inet/filter/limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-655 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-655 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + +Filter 663 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-656 + inet6/filter/FORWARD -j limit-656 + inet/filter/INPUT -j limit-656 + inet6/filter/INPUT -j limit-656 + inet/filter/OUTPUT -j limit-656 + inet6/filter/OUTPUT -j limit-656 + inet/filter/limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-656 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-656 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 664 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-657 + inet6/filter/FORWARD -j limit-657 + inet/filter/INPUT -j limit-657 + inet6/filter/INPUT -j limit-657 + inet/filter/OUTPUT -j limit-657 + inet6/filter/OUTPUT -j limit-657 + inet/filter/limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-657 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-657 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + +Filter 665 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-658 + inet6/filter/FORWARD -j limit-658 + inet/filter/INPUT -j limit-658 + inet6/filter/INPUT -j limit-658 + inet/filter/OUTPUT -j limit-658 + inet6/filter/OUTPUT -j limit-658 + inet/filter/limit-658 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-658 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 666 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-659 + inet6/filter/FORWARD -j limit-659 + inet/filter/INPUT -j limit-659 + inet6/filter/INPUT -j limit-659 + inet/filter/OUTPUT -j limit-659 + inet6/filter/OUTPUT -j limit-659 + inet/filter/limit-659 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-659 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 667 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-660 + inet6/filter/FORWARD -j limit-660 + inet/filter/INPUT -j limit-660 + inet6/filter/INPUT -j limit-660 + inet/filter/OUTPUT -j limit-660 + inet6/filter/OUTPUT -j limit-660 + inet/filter/limit-660 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-660 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-50 + inet6/filter/FORWARD -j logaccept-final-50 + inet/filter/INPUT -j logaccept-final-50 + inet6/filter/INPUT -j logaccept-final-50 + inet/filter/OUTPUT -j logaccept-final-50 + inet6/filter/OUTPUT -j logaccept-final-50 + inet/filter/logaccept-final-50 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-50 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-50 -j ACCEPT + inet6/filter/logaccept-final-50 -j ACCEPT + +Filter 668 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-661 + inet6/filter/FORWARD -j limit-661 + inet/filter/INPUT -j limit-661 + inet6/filter/INPUT -j limit-661 + inet/filter/OUTPUT -j limit-661 + inet6/filter/OUTPUT -j limit-661 + inet/filter/limit-661 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-661 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-661 -m limit --limit 1/second -j LOG + inet6/filter/limit-661 -m limit --limit 1/second -j LOG + +Filter 669 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-662 + inet6/filter/FORWARD -j limit-662 + inet/filter/INPUT -j limit-662 + inet6/filter/INPUT -j limit-662 + inet/filter/OUTPUT -j limit-662 + inet6/filter/OUTPUT -j limit-662 + inet/filter/limit-662 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-662 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 670 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"A","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-663 + inet6/filter/FORWARD -j limit-663 + inet/filter/INPUT -j limit-663 + inet6/filter/INPUT -j limit-663 + inet/filter/OUTPUT -j limit-663 + inet6/filter/OUTPUT -j limit-663 + inet/filter/limit-663 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-663 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 671 {"flow-limit":{"interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-664 + inet6/filter/FORWARD -j limit-664 + inet/filter/INPUT -j limit-664 + inet6/filter/INPUT -j limit-664 + inet/filter/OUTPUT -j limit-664 + inet6/filter/OUTPUT -j limit-664 + inet/filter/limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-664 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-664 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-664 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 672 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-665 + inet6/filter/FORWARD -j limit-665 + inet/filter/INPUT -j limit-665 + inet6/filter/INPUT -j limit-665 + inet/filter/OUTPUT -j limit-665 + inet6/filter/OUTPUT -j limit-665 + inet/filter/limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-665 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-665 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-665 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 673 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-666 + inet6/filter/FORWARD -j limit-666 + inet/filter/INPUT -j limit-666 + inet6/filter/INPUT -j limit-666 + inet/filter/OUTPUT -j limit-666 + inet6/filter/OUTPUT -j limit-666 + inet/filter/limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-666 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-666 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-666 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-51 + inet6/filter/FORWARD -j logaccept-final-51 + inet/filter/INPUT -j logaccept-final-51 + inet6/filter/INPUT -j logaccept-final-51 + inet/filter/OUTPUT -j logaccept-final-51 + inet6/filter/OUTPUT -j logaccept-final-51 + inet/filter/logaccept-final-51 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-51 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-51 -j ACCEPT + inet6/filter/logaccept-final-51 -j ACCEPT + +Filter 674 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-667 + inet6/filter/FORWARD -j limit-667 + inet/filter/INPUT -j limit-667 + inet6/filter/INPUT -j limit-667 + inet/filter/OUTPUT -j limit-667 + inet6/filter/OUTPUT -j limit-667 + inet/filter/limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-667 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-667 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-667 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 675 {"flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-668 + inet6/filter/FORWARD -j limit-668 + inet/filter/INPUT -j limit-668 + inet6/filter/INPUT -j limit-668 + inet/filter/OUTPUT -j limit-668 + inet6/filter/OUTPUT -j limit-668 + inet/filter/limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-668 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-668 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-668 -m recent --name user:C --rsource --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 676 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-669 + inet6/filter/FORWARD -j limit-669 + inet/filter/INPUT -j limit-669 + inet6/filter/INPUT -j limit-669 + inet/filter/OUTPUT -j limit-669 + inet6/filter/OUTPUT -j limit-669 + inet/filter/limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-669 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-669 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-669 -m recent --name user:C --rsource --mask fe00:: --set + +Filter 677 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-670 + inet6/filter/FORWARD -j limit-670 + inet/filter/INPUT -j limit-670 + inet6/filter/INPUT -j limit-670 + inet/filter/OUTPUT -j limit-670 + inet6/filter/OUTPUT -j limit-670 + inet/filter/limit-670 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-670 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 678 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-671 + inet6/filter/FORWARD -j limit-671 + inet/filter/INPUT -j limit-671 + inet6/filter/INPUT -j limit-671 + inet/filter/OUTPUT -j limit-671 + inet6/filter/OUTPUT -j limit-671 + inet/filter/limit-671 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-671 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 679 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-672 + inet6/filter/FORWARD -j limit-672 + inet/filter/INPUT -j limit-672 + inet6/filter/INPUT -j limit-672 + inet/filter/OUTPUT -j limit-672 + inet6/filter/OUTPUT -j limit-672 + inet/filter/limit-672 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-672 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-52 + inet6/filter/FORWARD -j logaccept-final-52 + inet/filter/INPUT -j logaccept-final-52 + inet6/filter/INPUT -j logaccept-final-52 + inet/filter/OUTPUT -j logaccept-final-52 + inet6/filter/OUTPUT -j logaccept-final-52 + inet/filter/logaccept-final-52 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-52 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-52 -j ACCEPT + inet6/filter/logaccept-final-52 -j ACCEPT + +Filter 680 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-673 + inet6/filter/FORWARD -j limit-673 + inet/filter/INPUT -j limit-673 + inet6/filter/INPUT -j limit-673 + inet/filter/OUTPUT -j limit-673 + inet6/filter/OUTPUT -j limit-673 + inet/filter/limit-673 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-673 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-673 -m limit --limit 1/second -j LOG + inet6/filter/limit-673 -m limit --limit 1/second -j LOG + +Filter 681 {"flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-674 + inet6/filter/FORWARD -j limit-674 + inet/filter/INPUT -j limit-674 + inet6/filter/INPUT -j limit-674 + inet/filter/OUTPUT -j limit-674 + inet6/filter/OUTPUT -j limit-674 + inet/filter/limit-674 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-674 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 682 {"action":"pass","flow-limit":{"interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-675 + inet6/filter/FORWARD -j limit-675 + inet/filter/INPUT -j limit-675 + inet6/filter/INPUT -j limit-675 + inet/filter/OUTPUT -j limit-675 + inet6/filter/OUTPUT -j limit-675 + inet/filter/limit-675 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-675 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 683 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-676 + inet6/filter/FORWARD -j limit-676 + inet/filter/INPUT -j limit-676 + inet6/filter/INPUT -j limit-676 + inet/filter/OUTPUT -j limit-676 + inet6/filter/OUTPUT -j limit-676 + inet/filter/limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-676 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-676 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-676 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 684 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"}} +(filter-limit) + inet/filter/FORWARD -j limit-677 + inet6/filter/FORWARD -j limit-677 + inet/filter/INPUT -j limit-677 + inet6/filter/INPUT -j limit-677 + inet/filter/OUTPUT -j limit-677 + inet6/filter/OUTPUT -j limit-677 + inet/filter/limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-677 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-677 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-677 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 685 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-678 + inet6/filter/FORWARD -j limit-678 + inet/filter/INPUT -j limit-678 + inet6/filter/INPUT -j limit-678 + inet/filter/OUTPUT -j limit-678 + inet6/filter/OUTPUT -j limit-678 + inet/filter/limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-678 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-678 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-678 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j logaccept-final-53 + inet6/filter/FORWARD -j logaccept-final-53 + inet/filter/INPUT -j logaccept-final-53 + inet6/filter/INPUT -j logaccept-final-53 + inet/filter/OUTPUT -j logaccept-final-53 + inet6/filter/OUTPUT -j logaccept-final-53 + inet/filter/logaccept-final-53 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-53 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-53 -j ACCEPT + inet6/filter/logaccept-final-53 -j ACCEPT + +Filter 686 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-679 + inet6/filter/FORWARD -j limit-679 + inet/filter/INPUT -j limit-679 + inet6/filter/INPUT -j limit-679 + inet/filter/OUTPUT -j limit-679 + inet6/filter/OUTPUT -j limit-679 + inet/filter/limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-679 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-679 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-679 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + +Filter 687 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-680 + inet6/filter/FORWARD -j limit-680 + inet/filter/INPUT -j limit-680 + inet6/filter/INPUT -j limit-680 + inet/filter/OUTPUT -j limit-680 + inet6/filter/OUTPUT -j limit-680 + inet/filter/limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-680 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-680 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-680 -m recent --name user:C --rdest --mask fe00:: --set + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 688 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-681 + inet6/filter/FORWARD -j limit-681 + inet/filter/INPUT -j limit-681 + inet6/filter/INPUT -j limit-681 + inet/filter/OUTPUT -j limit-681 + inet6/filter/OUTPUT -j limit-681 + inet/filter/limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-681 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-681 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-681 -m recent --name user:C --rdest --mask fe00:: --set + +Filter 689 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-682 + inet6/filter/FORWARD -j limit-682 + inet/filter/INPUT -j limit-682 + inet6/filter/INPUT -j limit-682 + inet/filter/OUTPUT -j limit-682 + inet6/filter/OUTPUT -j limit-682 + inet/filter/limit-682 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-682 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 690 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false}} +(filter-limit) + inet/filter/FORWARD -j limit-683 + inet6/filter/FORWARD -j limit-683 + inet/filter/INPUT -j limit-683 + inet6/filter/INPUT -j limit-683 + inet/filter/OUTPUT -j limit-683 + inet6/filter/OUTPUT -j limit-683 + inet/filter/limit-683 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-683 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 691 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-684 + inet6/filter/FORWARD -j limit-684 + inet/filter/INPUT -j limit-684 + inet6/filter/INPUT -j limit-684 + inet/filter/OUTPUT -j limit-684 + inet6/filter/OUTPUT -j limit-684 + inet/filter/limit-684 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-684 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j logaccept-final-54 + inet6/filter/FORWARD -j logaccept-final-54 + inet/filter/INPUT -j logaccept-final-54 + inet6/filter/INPUT -j logaccept-final-54 + inet/filter/OUTPUT -j logaccept-final-54 + inet6/filter/OUTPUT -j logaccept-final-54 + inet/filter/logaccept-final-54 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-54 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-54 -j ACCEPT + inet6/filter/logaccept-final-54 -j ACCEPT + +Filter 692 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-685 + inet6/filter/FORWARD -j limit-685 + inet/filter/INPUT -j limit-685 + inet6/filter/INPUT -j limit-685 + inet/filter/OUTPUT -j limit-685 + inet6/filter/OUTPUT -j limit-685 + inet/filter/limit-685 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-685 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/limit-685 -m limit --limit 1/second -j LOG + inet6/filter/limit-685 -m limit --limit 1/second -j LOG + +Filter 693 {"flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-686 + inet6/filter/FORWARD -j limit-686 + inet/filter/INPUT -j limit-686 + inet6/filter/INPUT -j limit-686 + inet/filter/OUTPUT -j limit-686 + inet6/filter/OUTPUT -j limit-686 + inet/filter/limit-686 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-686 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 694 {"action":"pass","flow-limit":{"addr":"dest","interval":5,"log":"none","name":"C","update":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-687 + inet6/filter/FORWARD -j limit-687 + inet/filter/INPUT -j limit-687 + inet6/filter/INPUT -j limit-687 + inet/filter/OUTPUT -j limit-687 + inet6/filter/OUTPUT -j limit-687 + inet/filter/limit-687 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j DROP + inet6/filter/limit-687 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j DROP + +Filter 695 {"flow-limit":150} +(filter-limit) + inet/filter/FORWARD -j limit-688 + inet6/filter/FORWARD -j limit-688 + inet/filter/INPUT -j limit-688 + inet6/filter/INPUT -j limit-688 + inet/filter/OUTPUT -j limit-688 + inet6/filter/OUTPUT -j limit-688 + inet/filter/limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-688 -j RETURN + inet6/filter/limit-688 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-688 -j RETURN + inet/filter/limit-688 -m limit --limit 1/second -j LOG + inet6/filter/limit-688 -m limit --limit 1/second -j LOG + inet/filter/limit-688 -j DROP + inet6/filter/limit-688 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 696 {"action":"pass","flow-limit":150} +(filter-limit) + inet/filter/FORWARD -j limit-689 + inet6/filter/FORWARD -j limit-689 + inet/filter/INPUT -j limit-689 + inet6/filter/INPUT -j limit-689 + inet/filter/OUTPUT -j limit-689 + inet6/filter/OUTPUT -j limit-689 + inet/filter/limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-689 -j RETURN + inet6/filter/limit-689 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-689 -j RETURN + inet/filter/limit-689 -m limit --limit 1/second -j LOG + inet6/filter/limit-689 -m limit --limit 1/second -j LOG + inet/filter/limit-689 -j DROP + inet6/filter/limit-689 -j DROP + +Filter 697 {"flow-limit":150,"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-690 + inet6/filter/FORWARD -j limit-690 + inet/filter/INPUT -j limit-690 + inet6/filter/INPUT -j limit-690 + inet/filter/OUTPUT -j limit-690 + inet6/filter/OUTPUT -j limit-690 + inet/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-690 -j RETURN + inet6/filter/limit-690 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-690 -j RETURN + inet/filter/limit-690 -m limit --limit 1/second -j LOG + inet6/filter/limit-690 -m limit --limit 1/second -j LOG + inet/filter/limit-690 -j DROP + inet6/filter/limit-690 -j DROP + inet/filter/FORWARD -j logaccept-final-55 + inet6/filter/FORWARD -j logaccept-final-55 + inet/filter/INPUT -j logaccept-final-55 + inet6/filter/INPUT -j logaccept-final-55 + inet/filter/OUTPUT -j logaccept-final-55 + inet6/filter/OUTPUT -j logaccept-final-55 + inet/filter/logaccept-final-55 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-55 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-55 -j ACCEPT + inet6/filter/logaccept-final-55 -j ACCEPT + +Filter 698 {"flow-limit":150,"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-691 + inet6/filter/FORWARD -j limit-691 + inet/filter/INPUT -j limit-691 + inet6/filter/INPUT -j limit-691 + inet/filter/OUTPUT -j limit-691 + inet6/filter/OUTPUT -j limit-691 + inet/filter/limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-691 -j RETURN + inet6/filter/limit-691 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-691 -j RETURN + inet/filter/limit-691 -m limit --limit 1/second -j LOG + inet6/filter/limit-691 -m limit --limit 1/second -j LOG + inet/filter/limit-691 -j DROP + inet6/filter/limit-691 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 699 {"flow-limit":{"count":150}} +(filter-limit) + inet/filter/FORWARD -j limit-692 + inet6/filter/FORWARD -j limit-692 + inet/filter/INPUT -j limit-692 + inet6/filter/INPUT -j limit-692 + inet/filter/OUTPUT -j limit-692 + inet6/filter/OUTPUT -j limit-692 + inet/filter/limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-692 -j RETURN + inet6/filter/limit-692 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-692 -j RETURN + inet/filter/limit-692 -m limit --limit 1/second -j LOG + inet6/filter/limit-692 -m limit --limit 1/second -j LOG + inet/filter/limit-692 -j DROP + inet6/filter/limit-692 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 700 {"action":"pass","flow-limit":{"count":150}} +(filter-limit) + inet/filter/FORWARD -j limit-693 + inet6/filter/FORWARD -j limit-693 + inet/filter/INPUT -j limit-693 + inet6/filter/INPUT -j limit-693 + inet/filter/OUTPUT -j limit-693 + inet6/filter/OUTPUT -j limit-693 + inet/filter/limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-693 -j RETURN + inet6/filter/limit-693 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-693 -j RETURN + inet/filter/limit-693 -m limit --limit 1/second -j LOG + inet6/filter/limit-693 -m limit --limit 1/second -j LOG + inet/filter/limit-693 -j DROP + inet6/filter/limit-693 -j DROP + +Filter 701 {"flow-limit":{"count":150},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-694 + inet6/filter/FORWARD -j limit-694 + inet/filter/INPUT -j limit-694 + inet6/filter/INPUT -j limit-694 + inet/filter/OUTPUT -j limit-694 + inet6/filter/OUTPUT -j limit-694 + inet/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-694 -j RETURN + inet6/filter/limit-694 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-694 -j RETURN + inet/filter/limit-694 -m limit --limit 1/second -j LOG + inet6/filter/limit-694 -m limit --limit 1/second -j LOG + inet/filter/limit-694 -j DROP + inet6/filter/limit-694 -j DROP + inet/filter/FORWARD -j logaccept-final-56 + inet6/filter/FORWARD -j logaccept-final-56 + inet/filter/INPUT -j logaccept-final-56 + inet6/filter/INPUT -j logaccept-final-56 + inet/filter/OUTPUT -j logaccept-final-56 + inet6/filter/OUTPUT -j logaccept-final-56 + inet/filter/logaccept-final-56 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-56 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-56 -j ACCEPT + inet6/filter/logaccept-final-56 -j ACCEPT + +Filter 702 {"flow-limit":{"count":150},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-695 + inet6/filter/FORWARD -j limit-695 + inet/filter/INPUT -j limit-695 + inet6/filter/INPUT -j limit-695 + inet/filter/OUTPUT -j limit-695 + inet6/filter/OUTPUT -j limit-695 + inet/filter/limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-695 -j RETURN + inet6/filter/limit-695 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-695 -j RETURN + inet/filter/limit-695 -m limit --limit 1/second -j LOG + inet6/filter/limit-695 -m limit --limit 1/second -j LOG + inet/filter/limit-695 -j DROP + inet6/filter/limit-695 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 703 {"flow-limit":{"count":150,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-696 + inet6/filter/FORWARD -j limit-696 + inet/filter/INPUT -j limit-696 + inet6/filter/INPUT -j limit-696 + inet/filter/OUTPUT -j limit-696 + inet6/filter/OUTPUT -j limit-696 + inet/filter/limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-696 -j RETURN + inet6/filter/limit-696 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-696 -j RETURN + inet/filter/limit-696 -j DROP + inet6/filter/limit-696 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 704 {"action":"pass","flow-limit":{"count":150,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-697 + inet6/filter/FORWARD -j limit-697 + inet/filter/INPUT -j limit-697 + inet6/filter/INPUT -j limit-697 + inet/filter/OUTPUT -j limit-697 + inet6/filter/OUTPUT -j limit-697 + inet/filter/limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-697 -j RETURN + inet6/filter/limit-697 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-697 -j RETURN + inet/filter/limit-697 -j DROP + inet6/filter/limit-697 -j DROP + +Filter 705 {"flow-limit":{"count":150,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-698 + inet6/filter/FORWARD -j limit-698 + inet/filter/INPUT -j limit-698 + inet6/filter/INPUT -j limit-698 + inet/filter/OUTPUT -j limit-698 + inet6/filter/OUTPUT -j limit-698 + inet/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-698 -j RETURN + inet6/filter/limit-698 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-698 -j RETURN + inet/filter/limit-698 -j DROP + inet6/filter/limit-698 -j DROP + inet/filter/FORWARD -j logaccept-final-57 + inet6/filter/FORWARD -j logaccept-final-57 + inet/filter/INPUT -j logaccept-final-57 + inet6/filter/INPUT -j logaccept-final-57 + inet/filter/OUTPUT -j logaccept-final-57 + inet6/filter/OUTPUT -j logaccept-final-57 + inet/filter/logaccept-final-57 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-57 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-57 -j ACCEPT + inet6/filter/logaccept-final-57 -j ACCEPT + +Filter 706 {"flow-limit":{"count":150,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-699 + inet6/filter/FORWARD -j limit-699 + inet/filter/INPUT -j limit-699 + inet6/filter/INPUT -j limit-699 + inet/filter/OUTPUT -j limit-699 + inet6/filter/OUTPUT -j limit-699 + inet/filter/limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-699 -j RETURN + inet6/filter/limit-699 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-699 -j RETURN + inet/filter/limit-699 -j DROP + inet6/filter/limit-699 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 707 {"flow-limit":{"count":150,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-700 + inet6/filter/FORWARD -j limit-700 + inet/filter/INPUT -j limit-700 + inet6/filter/INPUT -j limit-700 + inet/filter/OUTPUT -j limit-700 + inet6/filter/OUTPUT -j limit-700 + inet/filter/limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-700 -j RETURN + inet6/filter/limit-700 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-700 -j RETURN + inet/filter/limit-700 -j DROP + inet6/filter/limit-700 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 708 {"action":"pass","flow-limit":{"count":150,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-701 + inet6/filter/FORWARD -j limit-701 + inet/filter/INPUT -j limit-701 + inet6/filter/INPUT -j limit-701 + inet/filter/OUTPUT -j limit-701 + inet6/filter/OUTPUT -j limit-701 + inet/filter/limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-701 -j RETURN + inet6/filter/limit-701 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-701 -j RETURN + inet/filter/limit-701 -j DROP + inet6/filter/limit-701 -j DROP + +Filter 709 {"flow-limit":{"count":150,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-702 + inet6/filter/FORWARD -j limit-702 + inet/filter/INPUT -j limit-702 + inet6/filter/INPUT -j limit-702 + inet/filter/OUTPUT -j limit-702 + inet6/filter/OUTPUT -j limit-702 + inet/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-702 -j RETURN + inet6/filter/limit-702 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-702 -j RETURN + inet/filter/limit-702 -j DROP + inet6/filter/limit-702 -j DROP + inet/filter/FORWARD -j logaccept-final-58 + inet6/filter/FORWARD -j logaccept-final-58 + inet/filter/INPUT -j logaccept-final-58 + inet6/filter/INPUT -j logaccept-final-58 + inet/filter/OUTPUT -j logaccept-final-58 + inet6/filter/OUTPUT -j logaccept-final-58 + inet/filter/logaccept-final-58 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-58 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-58 -j ACCEPT + inet6/filter/logaccept-final-58 -j ACCEPT + +Filter 710 {"flow-limit":{"count":150,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-703 + inet6/filter/FORWARD -j limit-703 + inet/filter/INPUT -j limit-703 + inet6/filter/INPUT -j limit-703 + inet/filter/OUTPUT -j limit-703 + inet6/filter/OUTPUT -j limit-703 + inet/filter/limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-703 -j RETURN + inet6/filter/limit-703 -m hashlimit --hashlimit-upto 150/second --hashlimit-burst 150 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-703 -j RETURN + inet/filter/limit-703 -j DROP + inet6/filter/limit-703 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 711 {"flow-limit":{"count":150,"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-704 + inet6/filter/FORWARD -j limit-704 + inet/filter/INPUT -j limit-704 + inet6/filter/INPUT -j limit-704 + inet/filter/OUTPUT -j limit-704 + inet6/filter/OUTPUT -j limit-704 + inet/filter/limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-704 -j RETURN + inet6/filter/limit-704 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-704 -j RETURN + inet/filter/limit-704 -m limit --limit 1/second -j LOG + inet6/filter/limit-704 -m limit --limit 1/second -j LOG + inet/filter/limit-704 -j DROP + inet6/filter/limit-704 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 712 {"action":"pass","flow-limit":{"count":150,"interval":5}} +(filter-limit) + inet/filter/FORWARD -j limit-705 + inet6/filter/FORWARD -j limit-705 + inet/filter/INPUT -j limit-705 + inet6/filter/INPUT -j limit-705 + inet/filter/OUTPUT -j limit-705 + inet6/filter/OUTPUT -j limit-705 + inet/filter/limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-705 -j RETURN + inet6/filter/limit-705 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-705 -j RETURN + inet/filter/limit-705 -m limit --limit 1/second -j LOG + inet6/filter/limit-705 -m limit --limit 1/second -j LOG + inet/filter/limit-705 -j DROP + inet6/filter/limit-705 -j DROP + +Filter 713 {"flow-limit":{"count":150,"interval":5},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-706 + inet6/filter/FORWARD -j limit-706 + inet/filter/INPUT -j limit-706 + inet6/filter/INPUT -j limit-706 + inet/filter/OUTPUT -j limit-706 + inet6/filter/OUTPUT -j limit-706 + inet/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-706 -j RETURN + inet6/filter/limit-706 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-706 -j RETURN + inet/filter/limit-706 -m limit --limit 1/second -j LOG + inet6/filter/limit-706 -m limit --limit 1/second -j LOG + inet/filter/limit-706 -j DROP + inet6/filter/limit-706 -j DROP + inet/filter/FORWARD -j logaccept-final-59 + inet6/filter/FORWARD -j logaccept-final-59 + inet/filter/INPUT -j logaccept-final-59 + inet6/filter/INPUT -j logaccept-final-59 + inet/filter/OUTPUT -j logaccept-final-59 + inet6/filter/OUTPUT -j logaccept-final-59 + inet/filter/logaccept-final-59 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-59 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-59 -j ACCEPT + inet6/filter/logaccept-final-59 -j ACCEPT + +Filter 714 {"flow-limit":{"count":150,"interval":5},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-707 + inet6/filter/FORWARD -j limit-707 + inet/filter/INPUT -j limit-707 + inet6/filter/INPUT -j limit-707 + inet/filter/OUTPUT -j limit-707 + inet6/filter/OUTPUT -j limit-707 + inet/filter/limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-707 -j RETURN + inet6/filter/limit-707 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-707 -j RETURN + inet/filter/limit-707 -m limit --limit 1/second -j LOG + inet6/filter/limit-707 -m limit --limit 1/second -j LOG + inet/filter/limit-707 -j DROP + inet6/filter/limit-707 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 715 {"flow-limit":{"count":150,"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-708 + inet6/filter/FORWARD -j limit-708 + inet/filter/INPUT -j limit-708 + inet6/filter/INPUT -j limit-708 + inet/filter/OUTPUT -j limit-708 + inet6/filter/OUTPUT -j limit-708 + inet/filter/limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-708 -j RETURN + inet6/filter/limit-708 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-708 -j RETURN + inet/filter/limit-708 -j DROP + inet6/filter/limit-708 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 716 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":false}} +(filter-limit) + inet/filter/FORWARD -j limit-709 + inet6/filter/FORWARD -j limit-709 + inet/filter/INPUT -j limit-709 + inet6/filter/INPUT -j limit-709 + inet/filter/OUTPUT -j limit-709 + inet6/filter/OUTPUT -j limit-709 + inet/filter/limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-709 -j RETURN + inet6/filter/limit-709 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-709 -j RETURN + inet/filter/limit-709 -j DROP + inet6/filter/limit-709 -j DROP + +Filter 717 {"flow-limit":{"count":150,"interval":5,"log":false},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-710 + inet6/filter/FORWARD -j limit-710 + inet/filter/INPUT -j limit-710 + inet6/filter/INPUT -j limit-710 + inet/filter/OUTPUT -j limit-710 + inet6/filter/OUTPUT -j limit-710 + inet/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-710 -j RETURN + inet6/filter/limit-710 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-710 -j RETURN + inet/filter/limit-710 -j DROP + inet6/filter/limit-710 -j DROP + inet/filter/FORWARD -j logaccept-final-60 + inet6/filter/FORWARD -j logaccept-final-60 + inet/filter/INPUT -j logaccept-final-60 + inet6/filter/INPUT -j logaccept-final-60 + inet/filter/OUTPUT -j logaccept-final-60 + inet6/filter/OUTPUT -j logaccept-final-60 + inet/filter/logaccept-final-60 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-60 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-60 -j ACCEPT + inet6/filter/logaccept-final-60 -j ACCEPT + +Filter 718 {"flow-limit":{"count":150,"interval":5,"log":false},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-711 + inet6/filter/FORWARD -j limit-711 + inet/filter/INPUT -j limit-711 + inet6/filter/INPUT -j limit-711 + inet/filter/OUTPUT -j limit-711 + inet6/filter/OUTPUT -j limit-711 + inet/filter/limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-711 -j RETURN + inet6/filter/limit-711 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-711 -j RETURN + inet/filter/limit-711 -j DROP + inet6/filter/limit-711 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 719 {"flow-limit":{"count":150,"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-712 + inet6/filter/FORWARD -j limit-712 + inet/filter/INPUT -j limit-712 + inet6/filter/INPUT -j limit-712 + inet/filter/OUTPUT -j limit-712 + inet6/filter/OUTPUT -j limit-712 + inet/filter/limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-712 -j RETURN + inet6/filter/limit-712 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-712 -j RETURN + inet/filter/limit-712 -j DROP + inet6/filter/limit-712 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 720 {"action":"pass","flow-limit":{"count":150,"interval":5,"log":"none"}} +(filter-limit) + inet/filter/FORWARD -j limit-713 + inet6/filter/FORWARD -j limit-713 + inet/filter/INPUT -j limit-713 + inet6/filter/INPUT -j limit-713 + inet/filter/OUTPUT -j limit-713 + inet6/filter/OUTPUT -j limit-713 + inet/filter/limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-713 -j RETURN + inet6/filter/limit-713 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-713 -j RETURN + inet/filter/limit-713 -j DROP + inet6/filter/limit-713 -j DROP + +Filter 721 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":true} +(filter-limit) + inet/filter/FORWARD -j limit-714 + inet6/filter/FORWARD -j limit-714 + inet/filter/INPUT -j limit-714 + inet6/filter/INPUT -j limit-714 + inet/filter/OUTPUT -j limit-714 + inet6/filter/OUTPUT -j limit-714 + inet/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-714 -j RETURN + inet6/filter/limit-714 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-714 -j RETURN + inet/filter/limit-714 -j DROP + inet6/filter/limit-714 -j DROP + inet/filter/FORWARD -j logaccept-final-61 + inet6/filter/FORWARD -j logaccept-final-61 + inet/filter/INPUT -j logaccept-final-61 + inet6/filter/INPUT -j logaccept-final-61 + inet/filter/OUTPUT -j logaccept-final-61 + inet6/filter/OUTPUT -j logaccept-final-61 + inet/filter/logaccept-final-61 -m limit --limit 1/second -j LOG + inet6/filter/logaccept-final-61 -m limit --limit 1/second -j LOG + inet/filter/logaccept-final-61 -j ACCEPT + inet6/filter/logaccept-final-61 -j ACCEPT + +Filter 722 {"flow-limit":{"count":150,"interval":5,"log":"none"},"log":"none"} +(filter-limit) + inet/filter/FORWARD -j limit-715 + inet6/filter/FORWARD -j limit-715 + inet/filter/INPUT -j limit-715 + inet6/filter/INPUT -j limit-715 + inet/filter/OUTPUT -j limit-715 + inet6/filter/OUTPUT -j limit-715 + inet/filter/limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name limit-715 -j RETURN + inet6/filter/limit-715 -m hashlimit --hashlimit-upto 30/second --hashlimit-burst 30 --hashlimit-mode srcip --hashlimit-srcmask 128 --hashlimit-name limit-715 -j RETURN + inet/filter/limit-715 -j DROP + inet6/filter/limit-715 -j DROP + inet/filter/FORWARD -j ACCEPT + inet6/filter/FORWARD -j ACCEPT + inet/filter/INPUT -j ACCEPT + inet6/filter/INPUT -j ACCEPT + inet/filter/OUTPUT -j ACCEPT + inet6/filter/OUTPUT -j ACCEPT + +Filter 723 {"flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-716 + inet6/filter/INPUT -i eth0 -j limit-716 + inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-229 + inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-229 + inet/filter/logdrop-229 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-229 -m limit --limit 1/second -j LOG + inet/filter/logdrop-229 -j DROP + inet6/filter/logdrop-229 -j DROP + inet/filter/limit-716 -m recent --name limit-716 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-716 -m recent --name limit-716 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 724 {"action":"pass","flow-limit":1,"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-717 + inet6/filter/INPUT -i eth0 -j limit-717 + inet/filter/limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-230 + inet6/filter/limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-230 + inet/filter/logdrop-230 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-230 -m limit --limit 1/second -j LOG + inet/filter/logdrop-230 -j DROP + inet6/filter/logdrop-230 -j DROP + inet/filter/limit-717 -m recent --name limit-717 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-717 -m recent --name limit-717 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 725 {"flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-718 + inet6/filter/INPUT -i eth0 -j limit-718 + inet/filter/limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-231 + inet6/filter/limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-231 + inet/filter/logdrop-231 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-231 -m limit --limit 1/second -j LOG + inet/filter/logdrop-231 -j DROP + inet6/filter/logdrop-231 -j DROP + inet/filter/limit-718 -m limit --limit 1/second -j LOG + inet6/filter/limit-718 -m limit --limit 1/second -j LOG + inet/filter/limit-718 -m recent --name limit-718 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-718 -m recent --name limit-718 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 726 {"action":"pass","flow-limit":1,"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-719 + inet6/filter/INPUT -i eth0 -j limit-719 + inet/filter/limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-232 + inet6/filter/limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-232 + inet/filter/logdrop-232 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-232 -m limit --limit 1/second -j LOG + inet/filter/logdrop-232 -j DROP + inet6/filter/logdrop-232 -j DROP + inet/filter/limit-719 -m recent --name limit-719 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-719 -m recent --name limit-719 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 727 {"flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-720 + inet6/filter/INPUT -i eth0 -j limit-720 + inet/filter/limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-233 + inet6/filter/limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-233 + inet/filter/logdrop-233 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-233 -m limit --limit 1/second -j LOG + inet/filter/logdrop-233 -j DROP + inet6/filter/logdrop-233 -j DROP + inet/filter/limit-720 -m recent --name limit-720 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-720 -m recent --name limit-720 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 728 {"action":"pass","flow-limit":1,"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-721 + inet6/filter/INPUT -i eth0 -j limit-721 + inet/filter/limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-234 + inet6/filter/limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-234 + inet/filter/logdrop-234 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-234 -m limit --limit 1/second -j LOG + inet/filter/logdrop-234 -j DROP + inet6/filter/logdrop-234 -j DROP + inet/filter/limit-721 -m recent --name limit-721 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-721 -m recent --name limit-721 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 729 {"flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-722 + inet6/filter/INPUT -i eth0 -j limit-722 + inet/filter/limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-235 + inet6/filter/limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-235 + inet/filter/logdrop-235 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-235 -m limit --limit 1/second -j LOG + inet/filter/logdrop-235 -j DROP + inet6/filter/logdrop-235 -j DROP + inet/filter/limit-722 -m recent --name limit-722 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-722 -m recent --name limit-722 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 730 {"action":"pass","flow-limit":{},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-723 + inet6/filter/INPUT -i eth0 -j limit-723 + inet/filter/limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-236 + inet6/filter/limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-236 + inet/filter/logdrop-236 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-236 -m limit --limit 1/second -j LOG + inet/filter/logdrop-236 -j DROP + inet6/filter/logdrop-236 -j DROP + inet/filter/limit-723 -m recent --name limit-723 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-723 -m recent --name limit-723 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 731 {"flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-724 + inet6/filter/INPUT -i eth0 -j limit-724 + inet/filter/limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-237 + inet6/filter/limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-237 + inet/filter/logdrop-237 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-237 -m limit --limit 1/second -j LOG + inet/filter/logdrop-237 -j DROP + inet6/filter/logdrop-237 -j DROP + inet/filter/limit-724 -m limit --limit 1/second -j LOG + inet6/filter/limit-724 -m limit --limit 1/second -j LOG + inet/filter/limit-724 -m recent --name limit-724 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-724 -m recent --name limit-724 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 732 {"action":"pass","flow-limit":{},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-725 + inet6/filter/INPUT -i eth0 -j limit-725 + inet/filter/limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-238 + inet6/filter/limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-238 + inet/filter/logdrop-238 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-238 -m limit --limit 1/second -j LOG + inet/filter/logdrop-238 -j DROP + inet6/filter/logdrop-238 -j DROP + inet/filter/limit-725 -m recent --name limit-725 --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-725 -m recent --name limit-725 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 733 {"flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-726 + inet6/filter/INPUT -i eth0 -j limit-726 + inet/filter/limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-239 + inet6/filter/limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-239 + inet/filter/logdrop-239 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-239 -m limit --limit 1/second -j LOG + inet/filter/logdrop-239 -j DROP + inet6/filter/logdrop-239 -j DROP + inet/filter/limit-726 -m recent --name limit-726 --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-726 -m recent --name limit-726 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 734 {"action":"pass","flow-limit":{},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-727 + inet6/filter/INPUT -i eth0 -j limit-727 + inet/filter/limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-240 + inet6/filter/limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-240 + inet/filter/logdrop-240 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-240 -m limit --limit 1/second -j LOG + inet/filter/logdrop-240 -j DROP + inet6/filter/logdrop-240 -j DROP + inet/filter/limit-727 -m recent --name limit-727 --rsource --mask 255.255.255.255 --set + inet6/filter/limit-727 -m recent --name limit-727 --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 735 {"flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-728 + inet6/filter/INPUT -i eth0 -j limit-728 + inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-241 + inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-241 + inet/filter/logdrop-241 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-241 -m limit --limit 1/second -j LOG + inet/filter/logdrop-241 -j DROP + inet6/filter/logdrop-241 -j DROP + inet/filter/limit-728 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-728 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 736 {"action":"pass","flow-limit":{"name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-729 + inet6/filter/INPUT -i eth0 -j limit-729 + inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-242 + inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-242 + inet/filter/logdrop-242 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-242 -m limit --limit 1/second -j LOG + inet/filter/logdrop-242 -j DROP + inet6/filter/logdrop-242 -j DROP + inet/filter/limit-729 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-729 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 737 {"flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-730 + inet6/filter/INPUT -i eth0 -j limit-730 + inet/filter/limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-243 + inet6/filter/limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-243 + inet/filter/logdrop-243 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-243 -m limit --limit 1/second -j LOG + inet/filter/logdrop-243 -j DROP + inet6/filter/logdrop-243 -j DROP + inet/filter/limit-730 -m limit --limit 1/second -j LOG + inet6/filter/limit-730 -m limit --limit 1/second -j LOG + inet/filter/limit-730 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-730 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 738 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-731 + inet6/filter/INPUT -i eth0 -j limit-731 + inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-244 + inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-244 + inet/filter/logdrop-244 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-244 -m limit --limit 1/second -j LOG + inet/filter/logdrop-244 -j DROP + inet6/filter/logdrop-244 -j DROP + inet/filter/limit-731 -m recent --name user:A --rsource --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-731 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 739 {"flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-732 + inet6/filter/INPUT -i eth0 -j limit-732 + inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-245 + inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-245 + inet/filter/logdrop-245 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-245 -m limit --limit 1/second -j LOG + inet/filter/logdrop-245 -j DROP + inet6/filter/logdrop-245 -j DROP + inet/filter/limit-732 -m recent --name user:A --rsource --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-732 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 740 {"action":"pass","flow-limit":{"name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-733 + inet6/filter/INPUT -i eth0 -j limit-733 + inet/filter/limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-246 + inet6/filter/limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-246 + inet/filter/logdrop-246 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-246 -m limit --limit 1/second -j LOG + inet/filter/logdrop-246 -j DROP + inet6/filter/logdrop-246 -j DROP + inet/filter/limit-733 -m recent --name user:A --rsource --mask 255.255.255.255 --set + inet6/filter/limit-733 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 741 {"flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-734 + inet6/filter/INPUT -i eth0 -j limit-734 + inet/filter/limit-734 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-247 + inet6/filter/limit-734 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-247 + inet/filter/logdrop-247 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-247 -m limit --limit 1/second -j LOG + inet/filter/logdrop-247 -j DROP + inet6/filter/logdrop-247 -j DROP + inet/filter/limit-734 -j ACCEPT + inet6/filter/limit-734 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 742 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 743 {"flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-736 + inet6/filter/INPUT -i eth0 -j limit-736 + inet/filter/limit-736 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-249 + inet6/filter/limit-736 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-249 + inet/filter/logdrop-249 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-249 -m limit --limit 1/second -j LOG + inet/filter/logdrop-249 -j DROP + inet6/filter/logdrop-249 -j DROP + inet/filter/limit-736 -m limit --limit 1/second -j LOG + inet6/filter/limit-736 -m limit --limit 1/second -j LOG + inet/filter/limit-736 -j ACCEPT + inet6/filter/limit-736 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 744 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-737 + inet6/filter/INPUT -i eth0 -j limit-737 + inet/filter/limit-737 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-250 + inet6/filter/limit-737 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-250 + inet/filter/logdrop-250 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-250 -m limit --limit 1/second -j LOG + inet/filter/logdrop-250 -j DROP + inet6/filter/logdrop-250 -j DROP + inet/filter/limit-737 -m limit --limit 1/second -j LOG + inet6/filter/limit-737 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 745 {"flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-738 + inet6/filter/INPUT -i eth0 -j limit-738 + inet/filter/limit-738 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-251 + inet6/filter/limit-738 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-251 + inet/filter/logdrop-251 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-251 -m limit --limit 1/second -j LOG + inet/filter/logdrop-251 -j DROP + inet6/filter/logdrop-251 -j DROP + inet/filter/limit-738 -j ACCEPT + inet6/filter/limit-738 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 746 {"action":"pass","flow-limit":{"name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-252 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-252 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 747 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-740 + inet6/filter/INPUT -i eth0 -j limit-740 + inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-253 + inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-253 + inet/filter/logdrop-253 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-253 -m limit --limit 1/second -j LOG + inet/filter/logdrop-253 -j DROP + inet6/filter/logdrop-253 -j DROP + inet/filter/limit-740 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-740 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 748 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-741 + inet6/filter/INPUT -i eth0 -j limit-741 + inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-254 + inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-254 + inet/filter/logdrop-254 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-254 -m limit --limit 1/second -j LOG + inet/filter/logdrop-254 -j DROP + inet6/filter/logdrop-254 -j DROP + inet/filter/limit-741 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-741 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 749 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-742 + inet6/filter/INPUT -i eth0 -j limit-742 + inet/filter/limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-255 + inet6/filter/limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-255 + inet/filter/logdrop-255 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-255 -m limit --limit 1/second -j LOG + inet/filter/logdrop-255 -j DROP + inet6/filter/logdrop-255 -j DROP + inet/filter/limit-742 -m limit --limit 1/second -j LOG + inet6/filter/limit-742 -m limit --limit 1/second -j LOG + inet/filter/limit-742 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-742 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 750 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-743 + inet6/filter/INPUT -i eth0 -j limit-743 + inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-256 + inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-256 + inet/filter/logdrop-256 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-256 -m limit --limit 1/second -j LOG + inet/filter/logdrop-256 -j DROP + inet6/filter/logdrop-256 -j DROP + inet/filter/limit-743 -m recent --name user:A --rdest --mask 255.255.255.255 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-743 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 751 {"flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-744 + inet6/filter/INPUT -i eth0 -j limit-744 + inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-257 + inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-257 + inet/filter/logdrop-257 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-257 -m limit --limit 1/second -j LOG + inet/filter/logdrop-257 -j DROP + inet6/filter/logdrop-257 -j DROP + inet/filter/limit-744 -m recent --name user:A --rdest --mask 255.255.255.255 --set -j ACCEPT + inet6/filter/limit-744 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 752 {"action":"pass","flow-limit":{"addr":"dest","name":"A"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-745 + inet6/filter/INPUT -i eth0 -j limit-745 + inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --update --hitcount 1 --seconds 1 -j logdrop-258 + inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --update --hitcount 1 --seconds 1 -j logdrop-258 + inet/filter/logdrop-258 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-258 -m limit --limit 1/second -j LOG + inet/filter/logdrop-258 -j DROP + inet6/filter/logdrop-258 -j DROP + inet/filter/limit-745 -m recent --name user:A --rdest --mask 255.255.255.255 --set + inet6/filter/limit-745 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 753 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-746 + inet6/filter/INPUT -i eth0 -j limit-746 + inet/filter/limit-746 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-259 + inet6/filter/limit-746 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-259 + inet/filter/logdrop-259 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-259 -m limit --limit 1/second -j LOG + inet/filter/logdrop-259 -j DROP + inet6/filter/logdrop-259 -j DROP + inet/filter/limit-746 -j ACCEPT + inet6/filter/limit-746 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 754 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 755 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-748 + inet6/filter/INPUT -i eth0 -j limit-748 + inet/filter/limit-748 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-261 + inet6/filter/limit-748 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-261 + inet/filter/logdrop-261 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-261 -m limit --limit 1/second -j LOG + inet/filter/logdrop-261 -j DROP + inet6/filter/logdrop-261 -j DROP + inet/filter/limit-748 -m limit --limit 1/second -j LOG + inet6/filter/limit-748 -m limit --limit 1/second -j LOG + inet/filter/limit-748 -j ACCEPT + inet6/filter/limit-748 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 756 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-749 + inet6/filter/INPUT -i eth0 -j limit-749 + inet/filter/limit-749 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-262 + inet6/filter/limit-749 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-262 + inet/filter/logdrop-262 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-262 -m limit --limit 1/second -j LOG + inet/filter/logdrop-262 -j DROP + inet6/filter/logdrop-262 -j DROP + inet/filter/limit-749 -m limit --limit 1/second -j LOG + inet6/filter/limit-749 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 757 {"flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-750 + inet6/filter/INPUT -i eth0 -j limit-750 + inet/filter/limit-750 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-263 + inet6/filter/limit-750 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-263 + inet/filter/logdrop-263 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-263 -m limit --limit 1/second -j LOG + inet/filter/logdrop-263 -j DROP + inet6/filter/logdrop-263 -j DROP + inet/filter/limit-750 -j ACCEPT + inet6/filter/limit-750 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 758 {"action":"pass","flow-limit":{"addr":"dest","name":"A","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-264 + inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-264 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 759 {"flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-752 + inet6/filter/INPUT -i eth0 -j limit-752 + inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-265 + inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-265 + inet/filter/logdrop-265 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-265 -m limit --limit 1/second -j LOG + inet/filter/logdrop-265 -j DROP + inet6/filter/logdrop-265 -j DROP + inet/filter/limit-752 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-752 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 760 {"action":"pass","flow-limit":{"name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-753 + inet6/filter/INPUT -i eth0 -j limit-753 + inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-266 + inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-266 + inet/filter/logdrop-266 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-266 -m limit --limit 1/second -j LOG + inet/filter/logdrop-266 -j DROP + inet6/filter/logdrop-266 -j DROP + inet/filter/limit-753 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-753 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 761 {"flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-754 + inet6/filter/INPUT -i eth0 -j limit-754 + inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-267 + inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-267 + inet/filter/logdrop-267 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-267 -m limit --limit 1/second -j LOG + inet/filter/logdrop-267 -j DROP + inet6/filter/logdrop-267 -j DROP + inet/filter/limit-754 -m limit --limit 1/second -j LOG + inet6/filter/limit-754 -m limit --limit 1/second -j LOG + inet/filter/limit-754 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-754 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 762 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-755 + inet6/filter/INPUT -i eth0 -j limit-755 + inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-268 + inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-268 + inet/filter/logdrop-268 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-268 -m limit --limit 1/second -j LOG + inet/filter/logdrop-268 -j DROP + inet6/filter/logdrop-268 -j DROP + inet/filter/limit-755 -m recent --name user:C --rsource --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-755 -m recent --name user:C --rsource --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 763 {"flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-756 + inet6/filter/INPUT -i eth0 -j limit-756 + inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-269 + inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-269 + inet/filter/logdrop-269 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-269 -m limit --limit 1/second -j LOG + inet/filter/logdrop-269 -j DROP + inet6/filter/logdrop-269 -j DROP + inet/filter/limit-756 -m recent --name user:C --rsource --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-756 -m recent --name user:C --rsource --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 764 {"action":"pass","flow-limit":{"name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-757 + inet6/filter/INPUT -i eth0 -j limit-757 + inet/filter/limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-270 + inet6/filter/limit-757 -m recent --name user:C --rsource --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-270 + inet/filter/logdrop-270 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-270 -m limit --limit 1/second -j LOG + inet/filter/logdrop-270 -j DROP + inet6/filter/logdrop-270 -j DROP + inet/filter/limit-757 -m recent --name user:C --rsource --mask 254.0.0.0 --set + inet6/filter/limit-757 -m recent --name user:C --rsource --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 765 {"flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-758 + inet6/filter/INPUT -i eth0 -j limit-758 + inet/filter/limit-758 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-271 + inet6/filter/limit-758 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-271 + inet/filter/logdrop-271 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-271 -m limit --limit 1/second -j LOG + inet/filter/logdrop-271 -j DROP + inet6/filter/logdrop-271 -j DROP + inet/filter/limit-758 -j ACCEPT + inet6/filter/limit-758 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 766 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 767 {"flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-760 + inet6/filter/INPUT -i eth0 -j limit-760 + inet/filter/limit-760 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-273 + inet6/filter/limit-760 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-273 + inet/filter/logdrop-273 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-273 -m limit --limit 1/second -j LOG + inet/filter/logdrop-273 -j DROP + inet6/filter/logdrop-273 -j DROP + inet/filter/limit-760 -m limit --limit 1/second -j LOG + inet6/filter/limit-760 -m limit --limit 1/second -j LOG + inet/filter/limit-760 -j ACCEPT + inet6/filter/limit-760 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 768 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-761 + inet6/filter/INPUT -i eth0 -j limit-761 + inet/filter/limit-761 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-274 + inet6/filter/limit-761 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-274 + inet/filter/logdrop-274 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-274 -m limit --limit 1/second -j LOG + inet/filter/logdrop-274 -j DROP + inet6/filter/logdrop-274 -j DROP + inet/filter/limit-761 -m limit --limit 1/second -j LOG + inet6/filter/limit-761 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 769 {"flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-762 + inet6/filter/INPUT -i eth0 -j limit-762 + inet/filter/limit-762 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-275 + inet6/filter/limit-762 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-275 + inet/filter/logdrop-275 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-275 -m limit --limit 1/second -j LOG + inet/filter/logdrop-275 -j DROP + inet6/filter/logdrop-275 -j DROP + inet/filter/limit-762 -j ACCEPT + inet6/filter/limit-762 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 770 {"action":"pass","flow-limit":{"name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 771 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-764 + inet6/filter/INPUT -i eth0 -j limit-764 + inet/filter/limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-277 + inet6/filter/limit-764 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-277 + inet/filter/logdrop-277 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-277 -m limit --limit 1/second -j LOG + inet/filter/logdrop-277 -j DROP + inet6/filter/logdrop-277 -j DROP + inet/filter/limit-764 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-764 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 772 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-765 + inet6/filter/INPUT -i eth0 -j limit-765 + inet/filter/limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-278 + inet6/filter/limit-765 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-278 + inet/filter/logdrop-278 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-278 -m limit --limit 1/second -j LOG + inet/filter/logdrop-278 -j DROP + inet6/filter/logdrop-278 -j DROP + inet/filter/limit-765 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-765 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 773 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-766 + inet6/filter/INPUT -i eth0 -j limit-766 + inet/filter/limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-279 + inet6/filter/limit-766 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-279 + inet/filter/logdrop-279 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-279 -m limit --limit 1/second -j LOG + inet/filter/logdrop-279 -j DROP + inet6/filter/logdrop-279 -j DROP + inet/filter/limit-766 -m limit --limit 1/second -j LOG + inet6/filter/limit-766 -m limit --limit 1/second -j LOG + inet/filter/limit-766 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-766 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 774 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-767 + inet6/filter/INPUT -i eth0 -j limit-767 + inet/filter/limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-280 + inet6/filter/limit-767 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-280 + inet/filter/logdrop-280 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-280 -m limit --limit 1/second -j LOG + inet/filter/logdrop-280 -j DROP + inet6/filter/logdrop-280 -j DROP + inet/filter/limit-767 -m recent --name user:C --rdest --mask 254.0.0.0 --set -m limit --limit 1/second -j LOG + inet6/filter/limit-767 -m recent --name user:C --rdest --mask fe00:: --set -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 775 {"flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-768 + inet6/filter/INPUT -i eth0 -j limit-768 + inet/filter/limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-281 + inet6/filter/limit-768 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-281 + inet/filter/logdrop-281 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-281 -m limit --limit 1/second -j LOG + inet/filter/logdrop-281 -j DROP + inet6/filter/logdrop-281 -j DROP + inet/filter/limit-768 -m recent --name user:C --rdest --mask 254.0.0.0 --set -j ACCEPT + inet6/filter/limit-768 -m recent --name user:C --rdest --mask fe00:: --set -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 776 {"action":"pass","flow-limit":{"addr":"dest","name":"C"},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-769 + inet6/filter/INPUT -i eth0 -j limit-769 + inet/filter/limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --update --hitcount 1 --seconds 1 -j logdrop-282 + inet6/filter/limit-769 -m recent --name user:C --rdest --mask fe00:: --update --hitcount 1 --seconds 1 -j logdrop-282 + inet/filter/logdrop-282 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-282 -m limit --limit 1/second -j LOG + inet/filter/logdrop-282 -j DROP + inet6/filter/logdrop-282 -j DROP + inet/filter/limit-769 -m recent --name user:C --rdest --mask 254.0.0.0 --set + inet6/filter/limit-769 -m recent --name user:C --rdest --mask fe00:: --set + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 777 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-770 + inet6/filter/INPUT -i eth0 -j limit-770 + inet/filter/limit-770 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-283 + inet6/filter/limit-770 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-283 + inet/filter/logdrop-283 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-283 -m limit --limit 1/second -j LOG + inet/filter/logdrop-283 -j DROP + inet6/filter/logdrop-283 -j DROP + inet/filter/limit-770 -j ACCEPT + inet6/filter/limit-770 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 778 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284 + inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284 + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 779 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-772 + inet6/filter/INPUT -i eth0 -j limit-772 + inet/filter/limit-772 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-285 + inet6/filter/limit-772 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-285 + inet/filter/logdrop-285 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-285 -m limit --limit 1/second -j LOG + inet/filter/logdrop-285 -j DROP + inet6/filter/logdrop-285 -j DROP + inet/filter/limit-772 -m limit --limit 1/second -j LOG + inet6/filter/limit-772 -m limit --limit 1/second -j LOG + inet/filter/limit-772 -j ACCEPT + inet6/filter/limit-772 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 780 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":true,"no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-773 + inet6/filter/INPUT -i eth0 -j limit-773 + inet/filter/limit-773 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-286 + inet6/filter/limit-773 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-286 + inet/filter/logdrop-286 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-286 -m limit --limit 1/second -j LOG + inet/filter/logdrop-286 -j DROP + inet6/filter/logdrop-286 -j DROP + inet/filter/limit-773 -m limit --limit 1/second -j LOG + inet6/filter/limit-773 -m limit --limit 1/second -j LOG + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + +Filter 781 {"flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} +(filter-limit) + inet/filter/INPUT -i eth0 -j limit-774 + inet6/filter/INPUT -i eth0 -j limit-774 + inet/filter/limit-774 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-287 + inet6/filter/limit-774 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-287 + inet/filter/logdrop-287 -m limit --limit 1/second -j LOG + inet6/filter/logdrop-287 -m limit --limit 1/second -j LOG + inet/filter/logdrop-287 -j DROP + inet6/filter/logdrop-287 -j DROP + inet/filter/limit-774 -j ACCEPT + inet6/filter/limit-774 -j ACCEPT + inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack + inet/raw/OUTPUT -o eth0 -j CT --notrack + inet6/raw/OUTPUT -o eth0 -j CT --notrack + inet/filter/OUTPUT -o eth0 -j ACCEPT + inet6/filter/OUTPUT -o eth0 -j ACCEPT + +Filter 782 {"action":"pass","flow-limit":{"addr":"dest","name":"C","update":false},"in":"A","log":"none","no-track":true,"out":"_fw"} (filter-limit) - inet/filter/FORWARD -j limit-337 - inet6/filter/FORWARD