#!/usr/sbin/nft -f flush ruleset #table ip gojiweb { # chain PREROUTING { # type nat hook prerouting priority dstnat; # tcp dport 64200 log level debug prefix "dst nat" dnat to 192.168.1.5:80 persistent # } #} table ip my_filter { chain INPUT { type filter hook input priority filter; iifname myve1 ip saddr 0.0.0.0 accept; iifname myve1 ip saddr != 192.168.1.0/24 log prefix "Wrong source address from LAN " level info flags all counter reject with icmp type admin-prohibited; } } table ip my_notrack { chain PREROUTING { type filter hook prerouting priority raw; ip saddr 192.168.1.0/24 ip daddr 192.168.1.2 notrack ip saddr 192.168.1.2 ip daddr 192.168.1.0/24 notrack } } table inet map_e_filter { chain PREROUTING { type filter hook prerouting priority filter; iifname ip6tnl1 meta nfproto ipv6 log prefix "Error: ipv6 in tunnel! " flags all counter #reject with icmpv6 type admin-prohibited # iifname ip6tnl1 ct state invalid log prefix "Error: invalid packet in tunnel! " flags all #reject with icmpx type admin-prohibited # ip6 saddr 2400:4050:2ba1:ac00:2eff:65ff:fe8c:c77b udp dport 1900 mark set 200 # log prefix "ip6 dport1 " flags all # ip6 saddr fe80::2eff:65ff:fe8c:c77b udp dport 1900 mark set 200 # log prefix "ip6 dport3 " flags all # ip6 saddr ::ffff:192.168.1.1 udp dport 1900 mark set 200 # log prefix "ip6 dport2 " flags all # ip saddr 192.168.1.1 udp dport 1900 mark set 200 # log prefix "ip dport " flags all } chain INPUT { type filter hook input priority filter; # ip6 saddr 2400:4050:2ba1:ac00:2eff:65ff:fe8c:c77b log prefix "ip6 only " flags all # ip saddr 192.168.1.1 log prefix "ip only " flags all # udp dport 1900 log prefix "udp dport only " flags all iifname ip6tnl1 meta nfproto ipv6 log prefix "Error: ipv6 in tunnel! " flags all counter #reject with icmpv6 type admin-prohibited meta mark 200 log prefix "rejecting mark 200 " level debug flags all counter reject with icmpx type admin-prohibited # meta mark 200 reject with icmpx type admin-prohibited # ip6 saddr ::ffff:192.168.1.1 tcp flags syn drop # reject with icmpv6 type admin-prohibited # ip saddr 192.168.1.1 tcp flags syn drop # reject with icmp type admin-prohibited # ip6 saddr 2400:4050:2ba1:ac00:2eff:65ff:fe8c:c77b tcp flags syn drop # reject with icmpv6 type admin-prohibited } chain POSTROUTING { type filter hook postrouting priority filter; iifname ip6tnl1 tcp flags & syn == syn tcp option maxseg size set rt mtu counter # log prefix "TCPMSS shortened (input) " level debug flags all oifname ip6tnl1 tcp flags & syn == syn tcp option maxseg size set rt mtu counter # log prefix "TCPMSS shortened (output) " level debug flags all } } #table ip my_tproxy { # chain PREROUTING { # type filter hook prerouting priority mangle; # ip saddr 153.240.174.134 socket transparent 0 return # ether saddr 60:02:b4:75:28:2e return # ether daddr 60:02:b4:75:28:2e return # meta l4proto tcp socket transparent 1 meta mark set 300 counter accept # ether saddr 60:02:b4:75:28:2e tcp dport 80 ip daddr != 192.168.1.0/24 tproxy to 192.168.1.2:3129 meta mark set 300 counter # log prefix "tproxy " level debug flags all # tcp dport 80 ip daddr != 192.168.1.0/24 tproxy to 192.168.1.2:3129 meta mark set 300 counter # log prefix "tproxy " level debug flags all # ether saddr 60:02:b4:75:28:2e tcp dport 443 ip daddr != 192.168.1.0/24 tproxy to 192.168.1.2:3130 meta mark set 300 counter # log prefix "tproxy " level debug flags all # tcp dport 443 ip daddr != 192.168.1.0/24 tproxy to 192.168.1.2:3130 meta mark set 300 counter # log prefix "tproxy " level debug flags all # } #} table ip my_proxy { chain FORWARD { type filter hook forward priority filter; # udp dport 80 log prefix "rejected QUIC 80 " level debug flags all counter reject with icmp type admin-prohibited # udp dport 443 log prefix "rejected QUIC 443 " level debug flags all counter reject with icmp type admin-prohibited # ip saddr != 153.240.174.134 tcp dport 80 ip daddr != 192.168.1.0/24 log prefix "rejected HTTP " level debug flags all counter reject with tcp reset # ip saddr != 153.240.174.134 tcp dport 443 ip daddr != 192.168.1.0/24 log prefix "rejeced HTTPS " level debug flags all counter reject with tcp reset } # chain POSTROUTING { # type filter hook postrouting priority filter; # oifname ip6tnl1 tcp flags syn tcp dport 80 log prefix "not proxied " level debug flags all # oifname ip6tnl1 tcp flags syn tcp dport 20 log prefix "not proxied " level debug flags all # oifname ip6tnl1 tcp flags syn tcp dport 21 log prefix "not proxied " level debug flags all # oifname ip6tnl1 tcp flags syn tcp dport 443 log prefix "not proxied " level debug flags all # } } table ip map_e_nat { map myvmap { type mark : verdict elements = { 1 : goto map_e_chain1, 2 : goto map_e_chain2, 3 : goto map_e_chain3, 4 : goto map_e_chain4, 5 : goto map_e_chain5, 6 : goto map_e_chain6, 7 : goto map_e_chain7, 8 : goto map_e_chain8, 9 : goto map_e_chain9, 10 : goto map_e_chain10, 11 : goto map_e_chain11, 12 : goto map_e_chain12, 13 : goto map_e_chain13, 14 : goto map_e_chain14, 15 : goto map_e_chain15, 16 : goto map_e_chain16, 17 : goto map_e_chain17, 18 : goto map_e_chain18, 19 : goto map_e_chain19, 20 : goto map_e_chain20, 21 : goto map_e_chain21, 22 : goto map_e_chain22, 23 : goto map_e_chain23, 24 : goto map_e_chain24, 25 : goto map_e_chain25, 26 : goto map_e_chain26, 27 : goto map_e_chain27, 28 : goto map_e_chain28, 29 : goto map_e_chain29, 30 : goto map_e_chain30, 31 : goto map_e_chain31, 32 : goto map_e_chain32, 33 : goto map_e_chain33, 34 : goto map_e_chain34, 35 : goto map_e_chain35, 36 : goto map_e_chain36, 37 : goto map_e_chain37, 38 : goto map_e_chain38, 39 : goto map_e_chain39, 40 : goto map_e_chain40, 41 : goto map_e_chain41, 42 : goto map_e_chain42, 43 : goto map_e_chain43, 44 : goto map_e_chain44, 45 : goto map_e_chain45, 46 : goto map_e_chain46, 47 : goto map_e_chain47, 48 : goto map_e_chain48, 49 : goto map_e_chain49, 50 : goto map_e_chain50, 51 : goto map_e_chain51, 52 : goto map_e_chain52, 53 : goto map_e_chain53, 54 : goto map_e_chain54, 55 : goto map_e_chain55, 56 : goto map_e_chain56, 57 : goto map_e_chain57, 58 : goto map_e_chain58, 59 : goto map_e_chain59, 60 : goto map_e_chain60, 61 : goto map_e_chain61, 62 : goto map_e_chain62, 63 : goto map_e_chain63, 64 : goto map_e_chain64 } } chain POSTROUTING { type nat hook postrouting priority srcnat; oifname ip6tnl1 mark set 1 counter packets 0 oifname ip6tnl1 meta l4proto tcp mark set numgen inc mod 61 offset 2 counter packets 0 # Chain64 or 63 will not be used and reserved for server use. oifname ip6tnl1 meta l4proto udp mark set numgen inc mod 61 offset 2 counter packets 0 # Chain64 or 63 will not be used and reserved for server use. oifname ip6tnl1 meta l4proto icmp mark set numgen inc mod 61 offset 2 counter packets 0 # Chain64 or 63 will not be used and reserved for server use. oifname ip6tnl1 meta l4proto udplite mark set numgen inc mod 61 offset 2 counter packets 0 # Chain64 or 63 will not be used and reserved for server use. oifname ip6tnl1 meta l4proto sctp mark set numgen inc mod 61 offset 2 counter packets 0 # Chain64 or 63 will not be used and reserved for server use. oifname ip6tnl1 meta l4proto dccp mark set numgen inc mod 61 offset 2 counter packets 0 # Chain64 or 63 will not be used and reserved for server use. oifname ip6tnl1 meta mark vmap @myvmap } chain map_e_chain1 { log prefix "Unknown protocol to ip6tnl " level info flags all counter; } chain map_e_chain2 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:1728-1743 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:1728-1743 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:1728-1743 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:1728-1743 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:1728-1743 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:1728-1743 persistent; } chain map_e_chain3 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:2752-2767 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:2752-2767 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:2752-2767 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:2752-2767 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:2752-2767 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:2752-2767 persistent; } chain map_e_chain4 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:3776-3791 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:3776-3791 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:3776-3791 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:3776-3791 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:3776-3791 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:3776-3791 persistent; } chain map_e_chain5 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:4800-4815 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:4800-4815 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:4800-4815 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:4800-4815 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:4800-4815 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:4800-4815 persistent; } chain map_e_chain6 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:5824-5839 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:5824-5839 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:5824-5839 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:5824-5839 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:5824-5839 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:5824-5839 persistent; } chain map_e_chain7 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:6848-6863 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:6848-6863 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:6848-6863 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:6848-6863 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:6848-6863 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:6848-6863 persistent; } chain map_e_chain8 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:7872-7887 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:7872-7887 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:7872-7887 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:7872-7887 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:7872-7887 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:7872-7887 persistent; } chain map_e_chain9 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:8896-8911 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:8896-8911 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:8896-8911 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:8896-8911 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:8896-8911 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:8896-8911 persistent; } chain map_e_chain10 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:9920-9935 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:9920-9935 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:9920-9935 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:9920-9935 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:9920-9935 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:9920-9935 persistent; } chain map_e_chain11 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:10944-10959 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:10944-10959 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:10944-10959 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:10944-10959 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:10944-10959 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:10944-10959 persistent; } chain map_e_chain12 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:11968-11983 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:11968-11983 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:11968-11983 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:11968-11983 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:11968-11983 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:11968-11983 persistent; } chain map_e_chain13 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:12992-13007 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:12992-13007 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:12992-13007 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:12992-13007 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:12992-13007 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:12992-13007 persistent; } chain map_e_chain14 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:14016-14031 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:14016-14031 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:14016-14031 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:14016-14031 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:14016-14031 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:14016-14031 persistent; } chain map_e_chain15 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:15040-15055 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:15040-15055 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:15040-15055 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:15040-15055 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:15040-15055 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:15040-15055 persistent; } chain map_e_chain16 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:16064-16079 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:16064-16079 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:16064-16079 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:16064-16079 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:16064-16079 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:16064-16079 persistent; } chain map_e_chain17 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:17088-17103 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:17088-17103 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:17088-17103 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:17088-17103 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:17088-17103 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:17088-17103 persistent; } chain map_e_chain18 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:18112-18127 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:18112-18127 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:18112-18127 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:18112-18127 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:18112-18127 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:18112-18127 persistent; } chain map_e_chain19 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:19136-19151 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:19136-19151 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:19136-19151 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:19136-19151 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:19136-19151 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:19136-19151 persistent; } chain map_e_chain20 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:20160-20175 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:20160-20175 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:20160-20175 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:20160-20175 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:20160-20175 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:20160-20175 persistent; } chain map_e_chain21 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:21184-21199 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:21184-21199 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:21184-21199 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:21184-21199 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:21184-21199 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:21184-21199 persistent; } chain map_e_chain22 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:22208-22223 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:22208-22223 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:22208-22223 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:22208-22223 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:22208-22223 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:22208-22223 persistent; } chain map_e_chain23 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:23232-23247 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:23232-23247 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:23232-23247 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:23232-23247 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:23232-23247 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:23232-23247 persistent; } chain map_e_chain24 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:24256-24271 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:24256-24271 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:24256-24271 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:24256-24271 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:24256-24271 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:24256-24271 persistent; } chain map_e_chain25 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:25280-25295 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:25280-25295 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:25280-25295 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:25280-25295 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:25280-25295 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:25280-25295 persistent; } chain map_e_chain26 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:26304-26319 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:26304-26319 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:26304-26319 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:26304-26319 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:26304-26319 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:26304-26319 persistent; } chain map_e_chain27 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:27328-27343 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:27328-27343 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:27328-27343 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:27328-27343 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:27328-27343 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:27328-27343 persistent; } chain map_e_chain28 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:28352-28367 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:28352-28367 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:28352-28367 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:28352-28367 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:28352-28367 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:28352-28367 persistent; } chain map_e_chain29 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:29376-29391 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:29376-29391 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:29376-29391 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:29376-29391 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:29376-29391 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:29376-29391 persistent; } chain map_e_chain30 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:30400-30415 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:30400-30415 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:30400-30415 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:30400-30415 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:30400-30415 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:30400-30415 persistent; } chain map_e_chain31 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:31424-31439 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:31424-31439 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:31424-31439 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:31424-31439 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:31424-31439 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:31424-31439 persistent; } chain map_e_chain32 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:32448-32463 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:32448-32463 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:32448-32463 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:32448-32463 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:32448-32463 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:32448-32463 persistent; } chain map_e_chain33 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:33472-33487 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:33472-33487 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:33472-33487 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:33472-33487 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:33472-33487 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:33472-33487 persistent; } chain map_e_chain34 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:34496-34511 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:34496-34511 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:34496-34511 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:34496-34511 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:34496-34511 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:34496-34511 persistent; } chain map_e_chain35 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:35520-35535 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:35520-35535 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:35520-35535 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:35520-35535 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:35520-35535 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:35520-35535 persistent; } chain map_e_chain36 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:36544-36559 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:36544-36559 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:36544-36559 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:36544-36559 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:36544-36559 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:36544-36559 persistent; } chain map_e_chain37 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:37568-37583 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:37568-37583 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:37568-37583 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:37568-37583 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:37568-37583 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:37568-37583 persistent; } chain map_e_chain38 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:38592-38607 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:38592-38607 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:38592-38607 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:38592-38607 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:38592-38607 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:38592-38607 persistent; } chain map_e_chain39 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:39616-39631 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:39616-39631 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:39616-39631 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:39616-39631 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:39616-39631 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:39616-39631 persistent; } chain map_e_chain40 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:40640-40655 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:40640-40655 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:40640-40655 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:40640-40655 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:40640-40655 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:40640-40655 persistent; } chain map_e_chain41 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:41664-41679 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:41664-41679 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:41664-41679 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:41664-41679 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:41664-41679 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:41664-41679 persistent; } chain map_e_chain42 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:42688-42703 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:42688-42703 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:42688-42703 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:42688-42703 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:42688-42703 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:42688-42703 persistent; } chain map_e_chain43 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:43712-43727 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:43712-43727 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:43712-43727 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:43712-43727 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:43712-43727 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:43712-43727 persistent; } chain map_e_chain44 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:44736-44751 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:44736-44751 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:44736-44751 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:44736-44751 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:44736-44751 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:44736-44751 persistent; } chain map_e_chain45 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:45760-45775 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:45760-45775 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:45760-45775 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:45760-45775 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:45760-45775 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:45760-45775 persistent; } chain map_e_chain46 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:46784-46799 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:46784-46799 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:46784-46799 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:46784-46799 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:46784-46799 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:46784-46799 persistent; } chain map_e_chain47 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:47808-47823 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:47808-47823 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:47808-47823 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:47808-47823 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:47808-47823 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:47808-47823 persistent; } chain map_e_chain48 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:48832-48847 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:48832-48847 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:48832-48847 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:48832-48847 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:48832-48847 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:48832-48847 persistent; } chain map_e_chain49 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:49856-49871 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:49856-49871 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:49856-49871 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:49856-49871 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:49856-49871 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:49856-49871 persistent; } chain map_e_chain50 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:50880-50895 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:50880-50895 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:50880-50895 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:50880-50895 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:50880-50895 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:50880-50895 persistent; } chain map_e_chain51 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:51904-51919 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:51904-51919 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:51904-51919 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:51904-51919 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:51904-51919 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:51904-51919 persistent; } chain map_e_chain52 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:52928-52943 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:52928-52943 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:52928-52943 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:52928-52943 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:52928-52943 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:52928-52943 persistent; } chain map_e_chain53 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:53952-53967 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:53952-53967 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:53952-53967 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:53952-53967 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:53952-53967 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:53952-53967 persistent; } chain map_e_chain54 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:54976-54991 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:54976-54991 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:54976-54991 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:54976-54991 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:54976-54991 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:54976-54991 persistent; } chain map_e_chain55 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:56000-56015 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:56000-56015 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:56000-56015 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:56000-56015 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:56000-56015 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:56000-56015 persistent; } chain map_e_chain56 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:57024-57039 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:57024-57039 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:57024-57039 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:57024-57039 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:57024-57039 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:57024-57039 persistent; } chain map_e_chain57 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:58048-58063 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:58048-58063 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:58048-58063 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:58048-58063 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:58048-58063 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:58048-58063 persistent; } chain map_e_chain58 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:59072-59087 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:59072-59087 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:59072-59087 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:59072-59087 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:59072-59087 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:59072-59087 persistent; } chain map_e_chain59 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:60096-60111 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:60096-60111 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:60096-60111 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:60096-60111 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:60096-60111 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:60096-60111 persistent; } chain map_e_chain60 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:61120-61135 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:61120-61135 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:61120-61135 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:61120-61135 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:61120-61135 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:61120-61135 persistent; } chain map_e_chain61 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:62144-62159 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:62144-62159 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:62144-62159 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:62144-62159 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:62144-62159 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:62144-62159 persistent; } chain map_e_chain62 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:63168-63183 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:63168-63183 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:63168-63183 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:63168-63183 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:63168-63183 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:63168-63183 persistent; } chain map_e_chain63 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:64192-64207 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:64192-64207 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:64192-64207 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:64192-64207 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:64192-64207 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:64192-64207 persistent; } chain map_e_chain64 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:65216-65231 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:65216-65231 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:65216-65231 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:65216-65231 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:65216-65231 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:65216-65231 persistent; } }