Commit 1e9f63e5 authored by Kaarle Ritvanen's avatar Kaarle Ritvanen

Rule.combine: include target chains in result

parent 5e0f90f4
......@@ -481,7 +481,7 @@ function M.Rule:combine(ofs1, ofs2, key, unique)
else table.insert(res, of) end
end
return res
return extend(res, filter(ofs2, function(of) return of.chain end))
end
......
......@@ -375,6 +375,10 @@ Filter 26 {"action":"pass","conn-limit":{"name":"A","up
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-20
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-20
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-20
inet/filter/logdrop-20 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-20 -m limit --limit 1/second -j LOG
inet/filter/logdrop-20 -j DROP
inet6/filter/logdrop-20 -j DROP
Filter 27 {"conn-limit":{"name":"A","update":false},"log":true,"out":"B"}
(filter-limit)
......@@ -429,6 +433,10 @@ Filter 30 {"action":"pass","conn-limit":{"name":"A","up
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-24
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-24
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-24
inet/filter/logdrop-24 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-24 -m limit --limit 1/second -j LOG
inet/filter/logdrop-24 -j DROP
inet6/filter/logdrop-24 -j DROP
Filter 31 {"conn-limit":{"addr":"dest","name":"A"},"out":"B"}
(filter-limit)
......@@ -543,6 +551,10 @@ Filter 38 {"action":"pass","conn-limit":{"addr":"dest",
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-32
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-32
inet/filter/logdrop-32 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-32 -m limit --limit 1/second -j LOG
inet/filter/logdrop-32 -j DROP
inet6/filter/logdrop-32 -j DROP
Filter 39 {"conn-limit":{"addr":"dest","name":"A","update":false},"log":true,"out":"B"}
(filter-limit)
......@@ -597,6 +609,10 @@ Filter 42 {"action":"pass","conn-limit":{"addr":"dest",
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-36
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-36
inet/filter/logdrop-36 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-36 -m limit --limit 1/second -j LOG
inet/filter/logdrop-36 -j DROP
inet6/filter/logdrop-36 -j DROP
Filter 43 {"conn-limit":{"name":"C"},"out":"B"}
(filter-limit)
......@@ -711,6 +727,10 @@ Filter 50 {"action":"pass","conn-limit":{"name":"C","up
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-44
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-44
inet/filter/logdrop-44 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-44 -m limit --limit 1/second -j LOG
inet/filter/logdrop-44 -j DROP
inet6/filter/logdrop-44 -j DROP
Filter 51 {"conn-limit":{"name":"C","update":false},"log":true,"out":"B"}
(filter-limit)
......@@ -765,6 +785,10 @@ Filter 54 {"action":"pass","conn-limit":{"name":"C","up
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-48
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-48
inet/filter/logdrop-48 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-48 -m limit --limit 1/second -j LOG
inet/filter/logdrop-48 -j DROP
inet6/filter/logdrop-48 -j DROP
Filter 55 {"conn-limit":{"addr":"dest","name":"C"},"out":"B"}
(filter-limit)
......@@ -879,6 +903,10 @@ Filter 62 {"action":"pass","conn-limit":{"addr":"dest",
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-56
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-56
inet/filter/logdrop-56 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-56 -m limit --limit 1/second -j LOG
inet/filter/logdrop-56 -j DROP
inet6/filter/logdrop-56 -j DROP
Filter 63 {"conn-limit":{"addr":"dest","name":"C","update":false},"log":true,"out":"B"}
(filter-limit)
......@@ -933,6 +961,10 @@ Filter 66 {"action":"pass","conn-limit":{"addr":"dest",
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-60
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-60
inet/filter/logdrop-60 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-60 -m limit --limit 1/second -j LOG
inet/filter/logdrop-60 -j DROP
inet6/filter/logdrop-60 -j DROP
Filter 67 {"conn-limit":{"log":false},"out":"B"}
(filter-limit)
......@@ -2299,6 +2331,10 @@ Filter 188 {"action":"pass","conn-limit":{"interval":5,"
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-74
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-74
inet/filter/logdrop-74 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-74 -m limit --limit 1/second -j LOG
inet/filter/logdrop-74 -j DROP
inet6/filter/logdrop-74 -j DROP
Filter 189 {"conn-limit":{"interval":5,"name":"A","update":false},"log":true,"out":"B"}
(filter-limit)
......@@ -2353,6 +2389,10 @@ Filter 192 {"action":"pass","conn-limit":{"interval":5,"
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-78
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-78
inet/filter/logdrop-78 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-78 -m limit --limit 1/second -j LOG
inet/filter/logdrop-78 -j DROP
inet6/filter/logdrop-78 -j DROP
Filter 193 {"conn-limit":{"addr":"dest","interval":5,"name":"A"},"out":"B"}
(filter-limit)
......@@ -2467,6 +2507,10 @@ Filter 200 {"action":"pass","conn-limit":{"addr":"dest",
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-86
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-86
inet/filter/logdrop-86 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-86 -m limit --limit 1/second -j LOG
inet/filter/logdrop-86 -j DROP
inet6/filter/logdrop-86 -j DROP
Filter 201 {"conn-limit":{"addr":"dest","interval":5,"name":"A","update":false},"log":true,"out":"B"}
(filter-limit)
......@@ -2521,6 +2565,10 @@ Filter 204 {"action":"pass","conn-limit":{"addr":"dest",
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-90
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-90
inet/filter/logdrop-90 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-90 -m limit --limit 1/second -j LOG
inet/filter/logdrop-90 -j DROP
inet6/filter/logdrop-90 -j DROP
Filter 205 {"conn-limit":{"interval":5,"name":"C"},"out":"B"}
(filter-limit)
......@@ -2635,6 +2683,10 @@ Filter 212 {"action":"pass","conn-limit":{"interval":5,"
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-98
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-98
inet/filter/logdrop-98 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-98 -m limit --limit 1/second -j LOG
inet/filter/logdrop-98 -j DROP
inet6/filter/logdrop-98 -j DROP
Filter 213 {"conn-limit":{"interval":5,"name":"C","update":false},"log":true,"out":"B"}
(filter-limit)
......@@ -2689,6 +2741,10 @@ Filter 216 {"action":"pass","conn-limit":{"interval":5,"
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-102
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-102
inet/filter/logdrop-102 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-102 -m limit --limit 1/second -j LOG
inet/filter/logdrop-102 -j DROP
inet6/filter/logdrop-102 -j DROP
Filter 217 {"conn-limit":{"addr":"dest","interval":5,"name":"C"},"out":"B"}
(filter-limit)
......@@ -2803,6 +2859,10 @@ Filter 224 {"action":"pass","conn-limit":{"addr":"dest",
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-110
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-110
inet/filter/logdrop-110 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-110 -m limit --limit 1/second -j LOG
inet/filter/logdrop-110 -j DROP
inet6/filter/logdrop-110 -j DROP
Filter 225 {"conn-limit":{"addr":"dest","interval":5,"name":"C","update":false},"log":true,"out":"B"}
(filter-limit)
......@@ -2857,6 +2917,10 @@ Filter 228 {"action":"pass","conn-limit":{"addr":"dest",
inet/filter/OUTPUT -o eth1 -d 10.0.0.0/12 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-114
inet6/filter/FORWARD -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114
inet6/filter/OUTPUT -o eth1 -d fc00::/7 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-114
inet/filter/logdrop-114 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-114 -m limit --limit 1/second -j LOG
inet/filter/logdrop-114 -j DROP
inet6/filter/logdrop-114 -j DROP
Filter 229 {"conn-limit":{"interval":5,"log":false},"out":"B"}
(filter-limit)
......@@ -10971,6 +11035,10 @@ Filter 742 {"action":"pass","flow-limit":{"name":"A","up
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-248
inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-248
inet/filter/logdrop-248 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-248 -m limit --limit 1/second -j LOG
inet/filter/logdrop-248 -j DROP
inet6/filter/logdrop-248 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -11033,6 +11101,10 @@ Filter 746 {"action":"pass","flow-limit":{"name":"A","up
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-252
inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-252
inet/filter/logdrop-252 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-252 -m limit --limit 1/second -j LOG
inet/filter/logdrop-252 -j DROP
inet6/filter/logdrop-252 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -11163,6 +11235,10 @@ Filter 754 {"action":"pass","flow-limit":{"addr":"dest",
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-260
inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-260
inet/filter/logdrop-260 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-260 -m limit --limit 1/second -j LOG
inet/filter/logdrop-260 -j DROP
inet6/filter/logdrop-260 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -11225,6 +11301,10 @@ Filter 758 {"action":"pass","flow-limit":{"addr":"dest",
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 1 -j logdrop-264
inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 1 -j logdrop-264
inet/filter/logdrop-264 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-264 -m limit --limit 1/second -j LOG
inet/filter/logdrop-264 -j DROP
inet6/filter/logdrop-264 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -11355,6 +11435,10 @@ Filter 766 {"action":"pass","flow-limit":{"name":"C","up
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-272
inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-272
inet/filter/logdrop-272 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-272 -m limit --limit 1/second -j LOG
inet/filter/logdrop-272 -j DROP
inet6/filter/logdrop-272 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -11417,6 +11501,10 @@ Filter 770 {"action":"pass","flow-limit":{"name":"C","up
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-276
inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-276
inet/filter/logdrop-276 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-276 -m limit --limit 1/second -j LOG
inet/filter/logdrop-276 -j DROP
inet6/filter/logdrop-276 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -11547,6 +11635,10 @@ Filter 778 {"action":"pass","flow-limit":{"addr":"dest",
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-284
inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-284
inet/filter/logdrop-284 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-284 -m limit --limit 1/second -j LOG
inet/filter/logdrop-284 -j DROP
inet6/filter/logdrop-284 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -11609,6 +11701,10 @@ Filter 782 {"action":"pass","flow-limit":{"addr":"dest",
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 1 -j logdrop-288
inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 1 -j logdrop-288
inet/filter/logdrop-288 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-288 -m limit --limit 1/second -j LOG
inet/filter/logdrop-288 -j DROP
inet6/filter/logdrop-288 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -13219,6 +13315,10 @@ Filter 904 {"action":"pass","flow-limit":{"interval":5,"
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-302
inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-302
inet/filter/logdrop-302 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-302 -m limit --limit 1/second -j LOG
inet/filter/logdrop-302 -j DROP
inet6/filter/logdrop-302 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -13281,6 +13381,10 @@ Filter 908 {"action":"pass","flow-limit":{"interval":5,"
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-306
inet6/filter/INPUT -i eth0 -m recent --name user:A --rsource --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-306
inet/filter/logdrop-306 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-306 -m limit --limit 1/second -j LOG
inet/filter/logdrop-306 -j DROP
inet6/filter/logdrop-306 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -13411,6 +13515,10 @@ Filter 916 {"action":"pass","flow-limit":{"addr":"dest",
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-314
inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-314
inet/filter/logdrop-314 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-314 -m limit --limit 1/second -j LOG
inet/filter/logdrop-314 -j DROP
inet6/filter/logdrop-314 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -13473,6 +13581,10 @@ Filter 920 {"action":"pass","flow-limit":{"addr":"dest",
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask 255.255.255.255 --rcheck --hitcount 1 --seconds 5 -j logdrop-318
inet6/filter/INPUT -i eth0 -m recent --name user:A --rdest --mask ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff --rcheck --hitcount 1 --seconds 5 -j logdrop-318
inet/filter/logdrop-318 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-318 -m limit --limit 1/second -j LOG
inet/filter/logdrop-318 -j DROP
inet6/filter/logdrop-318 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -13603,6 +13715,10 @@ Filter 928 {"action":"pass","flow-limit":{"interval":5,"
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-326
inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-326
inet/filter/logdrop-326 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-326 -m limit --limit 1/second -j LOG
inet/filter/logdrop-326 -j DROP
inet6/filter/logdrop-326 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -13665,6 +13781,10 @@ Filter 932 {"action":"pass","flow-limit":{"interval":5,"
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-330
inet6/filter/INPUT -i eth0 -m recent --name user:C --rsource --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-330
inet/filter/logdrop-330 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-330 -m limit --limit 1/second -j LOG
inet/filter/logdrop-330 -j DROP
inet6/filter/logdrop-330 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -13795,6 +13915,10 @@ Filter 940 {"action":"pass","flow-limit":{"addr":"dest",
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-338
inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-338
inet/filter/logdrop-338 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-338 -m limit --limit 1/second -j LOG
inet/filter/logdrop-338 -j DROP
inet6/filter/logdrop-338 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -13857,6 +13981,10 @@ Filter 944 {"action":"pass","flow-limit":{"addr":"dest",
(filter-limit)
inet/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask 254.0.0.0 --rcheck --hitcount 1 --seconds 5 -j logdrop-342
inet6/filter/INPUT -i eth0 -m recent --name user:C --rdest --mask fe00:: --rcheck --hitcount 1 --seconds 5 -j logdrop-342
inet/filter/logdrop-342 -m limit --limit 1/second -j LOG
inet6/filter/logdrop-342 -m limit --limit 1/second -j LOG
inet/filter/logdrop-342 -j DROP
inet6/filter/logdrop-342 -j DROP
inet/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
inet6/raw/PREROUTING -m addrtype --dst-type LOCAL -i eth0 -j CT --notrack
......@@ -17368,6 +17496,7 @@ hash:net family inet
:logdrop-10 - [0:0]
:logdrop-100 - [0:0]
:logdrop-101 - [0:0]
:logdrop-102 - [0:0]
:logdrop-103 - [0:0]
:logdrop-104 - [0:0]
:logdrop-105 - [0:0]
......@@ -17376,9 +17505,11 @@ hash:net family inet
:logdrop-108 - [0:0]
:logdrop-109 - [0:0]
:logdrop-11 - [0:0]
:logdrop-110 - [0:0]
:logdrop-111 - [0:0]
:logdrop-112 - [0:0]
:logdrop-113 - [0:0]
:logdrop-114 - [0:0]
:logdrop-115 - [0:0]
:logdrop-116 - [0:0]
:logdrop-117 - [0:0]
......@@ -17473,6 +17604,7 @@ hash:net family inet
:logdrop-198 - [0:0]
:logdrop-199 - [0:0]
:logdrop-2 - [0:0]
:logdrop-20 - [0:0]
:logdrop-200 - [0:0]
:logdrop-201 - [0:0]
:logdrop-202 - [0:0]
......@@ -17516,6 +17648,7 @@ hash:net family inet
:logdrop-237 - [0:0]
:logdrop-238 - [0:0]
:logdrop-239 - [0:0]
:logdrop-24 - [0:0]
:logdrop-240 - [0:0]
:logdrop-241 - [0:0]
:logdrop-242 - [0:0]
......@@ -17524,10 +17657,12 @@ hash:net family inet
:logdrop-245 - [0:0]
:logdrop-246 - [0:0]
:logdrop-247 - [0:0]
:logdrop-248 - [0:0]
:logdrop-249 - [0:0]
:logdrop-25 - [0:0]
:logdrop-250 - [0:0]
:logdrop-251 - [0:0]
:logdrop-252 - [0:0]
:logdrop-253 - [0:0]
:logdrop-254 - [0:0]
:logdrop-255 - [0:0]
......@@ -17536,9 +17671,11 @@ hash:net family inet
:logdrop-258 - [0:0]
:logdrop-259 - [0:0]
:logdrop-26 - [0:0]
:logdrop-260 - [0:0]
:logdrop-261 - [0:0]
:logdrop-262 - [0:0]
:logdrop-263 - [0:0]
:logdrop-264 - [0:0]
:logdrop-265 - [0:0]
:logdrop-266 - [0:0]
:logdrop-267 - [0:0]
......@@ -17547,9 +17684,11 @@ hash:net family inet
:logdrop-27 - [0:0]
:logdrop-270 - [0:0]
:logdrop-271 - [0:0]
:logdrop-272 - [0:0]
:logdrop-273 - [0:0]
:logdrop-274 - [0:0]
:logdrop-275 - [0:0]
:logdrop-276 - [0:0]
:logdrop-277 - [0:0]
:logdrop-278 - [0:0]
:logdrop-279 - [0:0]
......@@ -17558,9 +17697,11 @@ hash:net family inet
:logdrop-281 - [0:0]
:logdrop-282 - [0:0]
:logdrop-283 - [0:0]
:logdrop-284 - [0:0]
:logdrop-285 - [0:0]
:logdrop-286 - [0:0]
:logdrop-287 - [0:0]
:logdrop-288 - [0:0]
:logdrop-289 - [0:0]
:logdrop-29 - [0:0]
:logdrop-290 - [0:0]
......@@ -17577,9 +17718,11 @@ hash:net family inet
:logdrop-30 - [0:0]
:logdrop-300 - [0:0]
:logdrop-301 - [0:0]
:logdrop-302 - [0:0]
:logdrop-303 - [0:0]
:logdrop-304 - [0:0]
:logdrop-305 - [0:0]
:logdrop-306 - [0:0]
:logdrop-307 - [0:0]
:logdrop-308 - [0:0]
:logdrop-309 - [0:0]
......@@ -17588,20 +17731,25 @@ hash:net family inet
:logdrop-311 - [0:0]
:logdrop-312 - [0:0]
:logdrop-313 - [0:0]
:logdrop-314 - [0:0]
:logdrop-315 - [0:0]
:logdrop-316 - [0:0]
:logdrop-317 - [0:0]
:logdrop-318 - [0:0]
:logdrop-319 - [0:0]
:logdrop-32 - [0:0]
:logdrop-320 - [0:0]
:logdrop-321 - [0:0]
:logdrop-322 - [0:0]
:logdrop-323 - [0:0]
:logdrop-324 - [0:0]
:logdrop-325 - [0:0]
:logdrop-326 - [0:0]
:logdrop-327 - [0:0]
:logdrop-328 - [0:0]
:logdrop-329 - [0:0]
:logdrop-33 - [0:0]
:logdrop-330 - [0:0]
:logdrop-331 - [0:0]
:logdrop-332 - [0:0]
:logdrop-333 - [0:0]
......@@ -17609,13 +17757,16 @@ hash:net family inet
:logdrop-335 - [0:0]
:logdrop-336 - [0:0]
:logdrop-337 - [0:0]
:logdrop-338 - [0:0]
:logdrop-339 - [0:0]
:logdrop-34 - [0:0]
:logdrop-340 - [0:0]
:logdrop-341 - [0:0]
:logdrop-342 - [0:0]
:logdrop-343 - [0:0]
:logdrop-344 - [0:0]
:logdrop-35 - [0:0]
:logdrop-36 - [0:0]
:logdrop-37 - [0:0]
:logdrop-38 - [0:0]
:logdrop-39 - [0:0]
......@@ -17624,9 +17775,11 @@ hash:net family inet
:logdrop-41 - [0:0]
:logdrop-42 - [0:0]
:logdrop-43 - [0:0]
:logdrop-44 - [0:0]
:logdrop-45 - [0:0]
:logdrop-46 - [0:0]
:logdrop-47 - [0:0]
:logdrop-48 - [0:0]
:logdrop-49 - [0:0]
:logdrop-5 - [0:0]
:logdrop-50 - [0:0]
......@@ -17635,10 +17788,12 @@ hash:net family inet
:logdrop-53 - [0:0]
:logdrop-54 - [0:0]
:logdrop-55 - [0:0]
:logdrop-56 - [0:0]
:logdrop-57 - [0:0]
:logdrop-58 - [0:0]
:logdrop-59 - [0:0]
:logdrop-6 - [0:0]
:logdrop-60 - [0:0]
:logdrop-61 - [0:0]
:logdrop-62 - [0:0]
:logdrop-63 - [0:0]
......@@ -17653,9 +17808,11 @@ hash:net family inet
:logdrop-71 - [0:0]
:logdrop-72 - [0:0]
:logdrop-73 - [0:0]
:logdrop-74 - [0:0]
:logdrop-75 - [0:0]
:logdrop-76 - [0:0]
:logdrop-77 - [0:0]
:logdrop-78 - [0:0]
:logdrop-79 - [0:0]
:logdrop-8 - [0:0]
:logdrop-80 - [0:0]
......@@ -17664,10 +17821,12 @@ hash:net family inet
:logdrop-83 - [0:0]
:logdrop-84 - [0:0]
:logdrop-85 - [0:0]
:logdrop-86 - [0:0]
:logdrop-87 - [0:0]
:logdrop-88 - [0:0]
:logdrop-89 - [0:0]
:logdrop-9 - [0:0]
:logdrop-90 - [0:0]
:logdrop-91 - [0:0]
:logdrop-92 - [0:0]
:logdrop-93 - [0:0]
......@@ -17675,6 +17834,7 @@ hash:net family inet
:logdrop-95 - [0:0]
:logdrop-96 - [0:0]
:logdrop-97 - [0:0]
:logdrop-98 - [0:0]
:logdrop-99 - [0:0]
:logpass-0 - [0:0]
:logreject-0 - [0:0]
......@@ -22884,6 +23044,8 @@ hash:net family inet
-A logdrop-100 -j DROP
-A logdrop-101 -m limit --limit 1/second -j LOG
-A logdrop-101 -j DROP
-A logdrop-102 -m limit --limit 1/second -j LOG
-A logdrop-102 -j DROP
-A logdrop-103 -m limit --limit 1/second -j LOG
-A logdrop-103 -j DROP
-A logdrop-104 -m limit --limit 1/second -j LOG
......@@ -22900,12 +23062,16 @@ hash:net family inet
-A logdrop-109 -j DROP
-A logdrop-11 -m limit --limit 1/second -j LOG
-A logdrop-11 -j DROP
-A logdrop-110 -m limit --limit 1/second -j LOG
-A logdrop-110 -j DROP
-A logdrop-111 -m limit --limit 1/second -j LOG
-A logdrop-111 -j DROP
-A logdrop-112 -m limit --limit 1/second -j LOG
-A logdrop-112 -j DROP
-A logdrop-113 -m limit --limit 1/second -j LOG
-A logdrop-113 -j DROP
-A logdrop-114 -m limit --limit 1/second -j LOG
-A logdrop-114 -j DROP
-A logdrop-115 -m limit --limit 1/second -j LOG
-A logdrop-115 -j DROP
-A logdrop-116 -m limit --limit 1/second -j LOG
......@@ -23094,6 +23260,8 @@ hash:net family inet
-A logdrop-199 -j DROP
-A logdrop-2 -m limit --limit 1/second -j LOG
-A logdrop-2 -j DROP
-A logdrop-20 -m limit --limit 1/second -j LOG
-A logdrop-20 -j DROP
-A logdrop-200 -m limit --limit 1/second -j LOG
-A logdrop-200 -j DROP
-A logdrop-201 -m limit --limit 1/second -j LOG
......@@ -23180,6 +23348,8 @@ hash:net family inet
-A logdrop-238 -j DROP
-A logdrop-239 -m limit --limit 1/second -j LOG
-A logdrop-239 -j DROP
-A logdrop-24 -m limit --limit 1/second -j LOG
-A logdrop-24 -j DROP
-A logdrop-240 -m limit --limit 1/second -j LOG
-A logdrop-240 -j DROP
-A logdrop-241 -m limit --limit 1/second -j LOG
......@@ -23196,6 +23366,8 @@ hash:net family inet
-A logdrop-246 -j DROP
-A logdrop-247 -m limit --limit 1/second -j LOG
-A logdrop-247 -j DROP
-A logdrop-248 -m limit --limit 1/second -j LOG
-A logdrop-248 -j DROP
-A logdrop-249 -m limit --limit 1/second -j LOG
-A logdrop-249 -j DROP
-A logdrop-25 -m limit --limit 1/second -j LOG
......@@ -23204,6 +23376,8 @@ hash:net family inet
-A logdrop-250 -j DROP
-A logdrop-251 -m limit --limit 1/second -j LOG
-A logdrop-251 -j DROP
-A logdrop-252 -m limit --limit 1/second -j LOG
-A logdrop-252 -j DROP
-A logdrop-253 -m limit --limit 1/second -j LOG
-A logdrop-253 -j DROP
-A logdrop-254 -m limit --limit 1/second -j LOG
......@@ -23220,12 +23394,16 @@ hash:net family inet
-A logdrop-259 -j DROP
-A logdrop-26 -m limit --limit 1/second -j LOG
-A logdrop-26 -j DROP
-A logdrop-260 -m limit --limit 1/second -j LOG
-A logdrop-260 -j DROP
-A logdrop-261 -m limit --limit 1/second -j LOG
-A logdrop-261 -j DROP
-A logdrop-262 -m limit --limit 1/second -j LOG
-A logdrop-262 -j DROP
-A logdrop-263 -m limit --limit 1/second -j LOG
-A logdrop-263 -j DROP
-A logdrop-264 -m limit --limit 1/second -j LOG
-A logdrop-264 -j DROP
-A logdrop-265 -m limit --limit 1/second -j LOG
-A logdrop-265 -j DROP
-A logdrop-266 -m limit --limit 1/second -j LOG
......@@ -23242,12 +23420,16 @@ hash:net family inet
-A logdrop-270 -j DROP
-A logdrop-271 -m limit --limit 1/second -j LOG
-A logdrop-271 -j DROP
-A logdrop-272 -m limit --limit 1/second -j LOG
-A logdrop-272 -j DROP
-A logdrop-273 -m limit --limit 1/second -j LOG
-A logdrop-273 -j DROP
-A logdrop-274 -m limit --limit 1/second -j LOG
-A logdrop-274 -j DROP
-A logdrop-275 -m limit --limit 1/second -j LOG
-A logdrop-275 -j DROP
-A logdrop-276 -m limit --limit 1/second -j LOG
-A logdrop-276 -j DROP
-A logdrop-277 -m limit --limit 1/second -j LOG
-A logdrop-277 -j DROP
-A logdrop-278 -m limit --limit 1/second -j LOG
......@@ -23264,12 +23446,16 @@ hash:net family inet
-A logdrop-282 -j DROP
-A logdrop-283 -m limit --limit 1/second -j LOG
-A logdrop-283 -j DROP
-A logdrop-284 -m limit --limit 1/second -j LOG
-A logdrop-284 -j DROP
-A logdrop-285 -m limit --limit 1/second -j LOG
-A logdrop-285 -j DROP
-A logdrop-286 -m limit --limit 1/second -j LOG
-A logdrop-286 -j DROP
-A logdrop-287 -m limit --limit 1/second -j LOG
-A logdrop-287 -j DROP
-A logdrop-288 -m limit --limit 1/second -j LOG
-A logdrop-288 -j DROP
-A logdrop-289 -m limit --limit 1/second -j LOG
-A logdrop-289 -j DROP
-A logdrop-29 -m limit --limit 1/second -j LOG
......@@ -23302,12 +23488,16 @@ hash:net family inet
-A logdrop-300 -j DROP
-A logdrop-301 -m limit --limit 1/second -j LOG
-A logdrop-301 -j DROP
-A logdrop-302 -m limit --limit 1/second -j LOG
-A logdrop-302 -j DROP
-A logdrop-303 -m limit --limit 1/second -j LOG
-A logdrop-303 -j DROP
-A logdrop-304 -m limit --limit 1/second -j LOG
-A logdrop-304 -j DROP
-A logdrop-305 -m limit --limit 1/second -j LOG
-A logdrop-305 -j DROP
-A logdrop-306 -m limit --limit 1/second -j LOG
-A logdrop-306 -j DROP
-A logdrop-307 -m limit --limit 1/second -j LOG
-A logdrop-307 -j DROP
-A logdrop-308 -m limit --limit 1/second -j LOG
......@@ -23324,14 +23514,20 @@ hash:net family inet
-A logdrop-312 -j DROP
-A logdrop-313 -m limit --limit 1/second -j LOG
-A logdrop-313 -j DROP
-A logdrop-314 -m limit --limit 1/second -j LOG
-A logdrop-314 -j DROP
-A logdrop-315 -m limit --limit 1/second -j LOG
-A logdrop-315 -j DROP
-A logdrop-316 -m limit --limit 1/second -j LOG
-A logdrop-316 -j DROP
-A logdrop-317 -m limit --limit 1/second -j LOG
-A logdrop-317 -j DROP
-A logdrop-318 -m limit --limit 1/second -j LOG
-A logdrop-318 -j DROP
-A logdrop-319 -m limit --limit 1/second -j LOG
-A logdrop-319 -j DROP
-A logdrop-32 -m limit --limit 1/second -j LOG
-A logdrop-32 -j DROP
-A logdrop-320 -m limit --limit 1/second -j LOG
-A logdrop-320 -j DROP
-A logdrop-321 -m limit --limit 1/second -j LOG
......@@ -23344,6 +23540,8 @@ hash:net family inet
-A logdrop-324 -j DROP
-A logdrop-325 -m limit --limit 1/second -j LOG
-A logdrop-325 -j DROP
-A logdrop-326 -m limit --limit 1/second -j LOG
-A logdrop-326 -j DROP
-A logdrop-327 -m limit --limit 1/second -j LOG
-A logdrop-327 -j DROP
-A logdrop-328 -m limit --limit 1/second -j LOG
......@@ -23352,6 +23550,8 @@ hash:net family inet
-A logdrop-329 -j DROP
-A logdrop-33 -m limit --limit 1/second -j LOG
-A logdrop-33 -j DROP
-A logdrop-330 -m limit --limit 1/second -j LOG
-A logdrop-330 -j DROP
-A logdrop-331 -m limit --limit 1/second -j LOG
-A logdrop-331 -j DROP
-A logdrop-332 -m limit --limit 1/second -j LOG
......@@ -23366,6 +23566,8 @@ hash:net family inet
-A logdrop-336 -j DROP
-A logdrop-337 -m limit --limit 1/second -j LOG
-A logdrop-337 -j DROP
-A logdrop-338 -m limit --limit 1/second -j LOG
-A logdrop-338 -j DROP
-A logdrop-339 -m limit --limit 1/second -j LOG
-A logdrop-339 -j DROP
-A logdrop-34 -m limit --limit 1/second -j LOG
......@@ -23374,12 +23576,16 @@ hash:net family inet
-A logdrop-340 -j DROP
-A logdrop-341 -m limit --limit 1/second -j LOG
-A logdrop-341 -j DROP
-A logdrop-342 -m limit --limit 1/second -j LOG
-A logdrop-342 -j DROP
-A logdrop-343 -m limit --limit 1/second -j LOG
-A logdrop-343 -j DROP
-A logdrop-344 -m limit --limit 1/second -j LOG
-A logdrop-344 -j DROP
-A logdrop-35 -m limit --limit 1/second -j LOG
-A logdrop-35 -j DROP
-A logdrop-36 -m limit --limit 1/second -j LOG
-A logdrop-36 -j DROP
-A logdrop-37 -m limit --limit 1/second -j LOG
-A logdrop-37 -j DROP
-A logdrop-38 -m limit --limit 1/second -j LOG
......@@ -23396,12 +23602,16 @@ hash:net family inet
-A logdrop-42 -j DROP
-A logdrop-43 -m limit --limit 1/second -j LOG
-A logdrop-43 -j DROP
-A logdrop-44 -m limit --limit 1/second -j LOG
-A logdrop-44 -j DROP
-A logdrop-45 -m limit --limit 1/second -j LOG
-A logdrop-45 -j DROP
-A logdrop-46 -m limit --limit 1/second -j LOG
-A logdrop-46 -j DROP
-A logdrop-47 -m limit --limit 1/second -j LOG
-A logdrop-47 -j DROP
-A logdrop-48 -m limit --limit 1/second -j LOG
-A logdrop-48 -j DROP
-A logdrop-49 -m limit --limit 1/second -j LOG
-A logdrop-49 -j DROP
-A logdrop-5 -m limit --limit 1/second -j LOG
......@@ -23418,6 +23628,8 @@ hash:net family inet
-A logdrop-54 -j DROP
-A logdrop-55 -m limit --limit 1/second -j LOG
-A logdrop-55 -j DROP
-A logdrop-56 -m limit --limit 1/second -j LOG
-A logdrop-56 -j DROP
-A logdrop-57 -m limit --limit 1/second -j LOG
-A logdrop-57 -j DROP
-A logdrop-58 -m limit --limit 1/second -j LOG
......@@ -23426,6 +23638,8 @@ hash:net family inet
-A logdrop-59 -j DROP
-A logdrop-6 -m limit --limit 1/second -j LOG
-A logdrop-6 -j DROP
-A logdrop-60 -m limit --limit 1/second -j LOG
-A logdrop-60 -j DROP
-A logdrop-61 -m limit --limit 1/second -j LOG
-A logdrop-61 -j DROP
-A logdrop-62 -m limit --limit 1/second -j LOG
......@@ -23454,12 +23668,16 @@ hash:net family inet
-A logdrop-72 -j DROP
-A logdrop-73 -m limit --limit 1/second -j LOG
-A logdrop-73 -j DROP
-A logdrop-74 -m limit --limit 1/second -j LOG
-A logdrop-74 -j DROP
-A logdrop-75 -m limit --limit 1/second -j LOG
-A logdrop-75 -j DROP
-A logdrop-76 -m limit --limit 1/second -j LOG
-A logdrop-76 -j DROP
-A logdrop-77 -m limit --limit 1/second -j LOG
-A logdrop-77 -j DROP
-A logdrop-78 -m limit --limit 1/second -j LOG
-A logdrop-78 -j DROP
-A logdrop-79 -m limit --limit 1/second -j LOG
-A logdrop-79 -j DROP
-A logdrop-8 -m limit --limit 1/second -j LOG
......@@ -23476,6 +23694,8 @@ hash:net family inet
-A logdrop-84 -j DROP
-A logdrop-85 -m limit --limit 1/second -j LOG
-A logdrop-85 -j DROP
-A logdrop-86 -m limit --limit 1/second -j LOG
-A logdrop-86 -j DROP
-A logdrop-87 -m limit --limit 1/second -j LOG
-A logdrop-87 -j DROP
-A logdrop-88 -m limit --limit 1/second -j LOG
......@@ -23484,6 +23704,8 @@ hash:net family inet
-A logdrop-89 -j DROP
-A logdrop-9 -m limit --limit 1/second -j LOG
-A logdrop-9 -j DROP
-A logdrop-90 -m limit --limit 1/second -j LOG
-A logdrop-90 -j DROP
-A logdrop-91 -m limit --limit 1/second -j LOG
-A logdrop-91 -j DROP
-A logdrop-92 -m limit --limit 1/second -j LOG
......@@ -23498,6 +23720,8 @@ hash:net family inet
-A logdrop-96 -j DROP
-A logdrop-97 -m limit --limit 1/second -j LOG
-A logdrop-97 -j DROP
-A logdrop-98 -m limit --limit 1/second -j LOG
-A logdrop-98 -j DROP
-A logdrop-99 -m limit --limit 1/second -j LOG
-A logdrop-99 -j DROP
-A logpass-0 -m limit --limit 1/second -j LOG
......@@ -25174,6 +25398,7 @@ COMMIT
:logdrop-10 - [0:0]
:logdrop-100 - [0:0]
:logdrop-101 - [0:0]