onkelbeh/fwbuilder
1
0
Fork 0
mirror of https://github.com/fwbuilder/fwbuilder synced 2025-10-16 23:47:46 +02:00
Code Issues Releases Wiki Activity

fixes #1985 implement FWObjectDatabase::setPredictableIds as virtual function

Browse Source
This commit is contained in:
Vadim Kurland 2011-01-25 16:38:35 -08:00
parent 2c85c952bf
commit 71a94277a8
11 changed files with 315 additions and 281 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/ChangeLog
View File

@ -1,5 +1,9 @@
2011-01-25 vadim <vadim@netcitadel.com>
* FWObject.cpp (updateNonStandardObjectReferences): see #1985
added virtual function updateNonStandardObjectReferences() that is
supposed to update any references to objects stored as attributes.
* ACL.cpp (trimLine): fixes #1986 "Cisco ASA remarks should be
truncated to 100 characters or less". Trimming all lines used for
access list remarks to <100 characters. Remarks can only be less

4
src/libfwbuilder/src/fwbuilder/FWObject.cpp
View File

@ -244,6 +244,10 @@ map<string, void*> &FWObject::getAllPrivateData()
return private_data;
}
void FWObject::updateNonStandardObjectReferences()
{
}
FWObject* FWObject::getParent() const
{
return parent;

14
src/libfwbuilder/src/fwbuilder/FWObject.h
View File

@ -153,7 +153,19 @@ protected:
* set.
*/
virtual void findAllReferences(const FWObject *obj, std::set<FWReference*> &res);
/**
* internal method: update references to other objects this object
* might keep in attributes. Example of this is reference to
* branch rule set that is stored as its string ID in RuleOptions
* object. Eventually we must fix these and make these references
* either use FWReference child object or be normal C++
* pointers. Meanwhile, this virtual method is called from
* FWObjectDatabase::_set_predictable_str_ids_recursively() when string
* ids are replaced (and possibly from other places for similar reasons).
*/
virtual void updateNonStandardObjectReferences();
FWObject();
// special constructor used to create FWObjectDatabase objects

87
src/libfwbuilder/src/fwbuilder/FWObjectDatabase.cpp
View File

@ -217,15 +217,6 @@ string FWObjectDatabase::getStringId(int i_id)
return id_dict[i_id];
}
/*
* private method used in setPredictableIds()
*/
void FWObjectDatabase::change_string_id(int i_id, const string &s_id)
{
id_dict[i_id] = s_id;
id_dict_reverse[s_id] = i_id;
}
string FWObjectDatabase::getPredictableId(const string &prefix)
{
ostringstream str;
@ -235,56 +226,44 @@ string FWObjectDatabase::getPredictableId(const string &prefix)
return new_id;
}
void FWObjectDatabase::setPredictableIds(FWObject *obj)
void FWObjectDatabase::_setPredictableStrIdsRecursively(FWObject *obj)
{
if (obj->getBool(".seen_this")) return;
if (obj->getBool(".seen_this")) return;
if (!obj->isReadOnly() && !FWObjectDatabase::isA(obj) &&
obj->getLibrary()->getId() != FWObjectDatabase::STANDARD_LIB_ID &&
obj->getLibrary()->getId() != FWObjectDatabase::DELETED_OBJECTS_ID &&
obj->getId() != -1)
{
string new_id = getPredictableId("id");
string old_id = FWObjectDatabase::getStringId(obj->getId());
if (!obj->isReadOnly() && !FWObjectDatabase::isA(obj) &&
obj->getLibrary()->getId() != FWObjectDatabase::STANDARD_LIB_ID &&
obj->getLibrary()->getId() != FWObjectDatabase::DELETED_OBJECTS_ID &&
obj->getId() != -1)
{
string new_id = getPredictableId("id");
int int_id = obj->getId();
FWObjectDatabase::change_string_id(obj->getId(), new_id);
obj->setBool(".seen_this", true);
id_dict[int_id] = new_id;
id_dict_reverse[new_id] = int_id;
// TODO: This should really be implemented as a virtual method
// so that the knowledge of the specifics of the
// implementation of these actions stays inside the class
// PolicyRule
if (PolicyRule::isA(obj))
{
PolicyRule *rule = PolicyRule::cast(obj);
switch (rule->getAction())
{
case PolicyRule::Branch:
{
RuleSet *branch_ruleset = rule->getBranch();
setPredictableIds(branch_ruleset);
rule->setBranch(branch_ruleset);
rule->setTagObject(NULL);
break;
}
case PolicyRule::Tag:
{
FWObject *tag_object = rule->getTagObject();
setPredictableIds(tag_object);
rule->setTagObject(tag_object);
rule->setBranch(NULL);
break;
}
default:
break;
}
}
}
obj->setBool(".seen_this", true);
}
for (list<FWObject*>::iterator it=obj->begin(); it!=obj->end(); ++it)
{
setPredictableIds(*it);
}
for (list<FWObject*>::iterator it=obj->begin(); it!=obj->end(); ++it)
{
_setPredictableStrIdsRecursively(*it);
}
}
void FWObjectDatabase::_updateNonStandardObjectReferencesRecursively(
FWObject *obj)
{
for (list<FWObject*>::iterator it=obj->begin(); it!=obj->end(); ++it)
{
(*it)->updateNonStandardObjectReferences();
_updateNonStandardObjectReferencesRecursively(*it);
}
}
void FWObjectDatabase::setPredictableIds()
{
_setPredictableStrIdsRecursively(this);
_updateNonStandardObjectReferencesRecursively(this);
}

13
src/libfwbuilder/src/fwbuilder/FWObjectDatabase.h
View File

@ -231,7 +231,8 @@ private:
std::map<int,int> &id_map,
const std::string &dedup_attribute);
static void change_string_id(int i_id, const std::string &s_id);
void _setPredictableStrIdsRecursively(FWObject *obj);
void _updateNonStandardObjectReferencesRecursively(FWObject *obj);
protected:
@ -436,10 +437,14 @@ public:
/**
* This method replaces random string object ids with
* predictable ones. Used in unit testing to create .fwb
* files that can be compared.
* predictable ones. This does not change their int IDs, only
* string IDs that appear in the XML file when objects are
* saved change.
*
* Used in unit testing to create .fwb files that can be
* compared.
*/
void setPredictableIds(FWObject *obj);
virtual void setPredictableIds();
/**
* This is the main "Create" method:

27
src/libfwbuilder/src/fwbuilder/Rule.cpp
View File

@ -407,6 +407,33 @@ FWOptions* PolicyRule::getOptionsObject()
return FWOptions::cast( getFirstByType(PolicyRuleOptions::TYPENAME) );
}
/*
* FWObjectDatabase::setPredictableIds() calls this method after it
* has updated string ID of all objects, including rule sets.
*/
void PolicyRule::updateNonStandardObjectReferences()
{
switch (getAction())
{
case PolicyRule::Branch:
{
RuleSet *branch_ruleset = getBranch();
setBranch(branch_ruleset);
setTagObject(NULL);
break;
}
case PolicyRule::Tag:
{
FWObject *tag_object = getTagObject();
setTagObject(tag_object);
setBranch(NULL);
break;
}
default:
break;
}
}
RuleSet* PolicyRule::getBranch()
{
if (getAction() != PolicyRule::Branch) return NULL;

3
src/libfwbuilder/src/fwbuilder/Rule.h
View File

@ -194,6 +194,9 @@ private:
libfwbuilder::RuleElementInterval* when_re;
Action action;
Direction direction;
protected:
virtual void updateNonStandardObjectReferences();
public:

2
src/unit_tests/DiscoveryDruidTest/DiscoveryDruidTest.cpp
View File

@ -145,7 +145,7 @@ void DiscoveryDruidTest::testHostsImport()
// this is running after import dialog is closed
mw->activeProject()->setFileName("result.fwb");
mw->activeProject()->db()->setPredictableIds(mw->activeProject()->db());
mw->activeProject()->db()->setPredictableIds();
mw->activeProject()->save();
compareFwbFiles("output.fwb", "result.fwb");

4
src/unit_tests/ImporterTest/ImporterTest.cpp
View File

@ -195,7 +195,7 @@ void ImporterTest::IOSImporterTest()
imp->finalize();
db->setPredictableIds(db);
db->setPredictableIds();
db->saveFile("ios_res.fwb");
@ -223,7 +223,7 @@ void ImporterTest::IPTImporterTest()
imp->finalize();
db->setPredictableIds(db);
db->setPredictableIds();
db->saveFile("ipt_res.fwb");

34
src/unit_tests/ImporterTest/test_data/ios.fwb
View File

@ -1,6 +1,6 @@
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE FWObjectDatabase SYSTEM "fwbuilder.dtd">
<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="17" lastModified="1288831958" id="root">
<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="17" lastModified="1295999701" id="root">
<Library id="syslib000" color="#d4f8ff" name="Standard" comment="Standard objects" ro="True">
<AnyNetwork id="sysid0" name="Any" comment="Any Network" ro="False" address="0.0.0.0" netmask="0.0.0.0"/>
<AnyIPService id="sysid1" protocol_num="0" name="Any" comment="Any IP Service" ro="False"/>
@ -494,7 +494,7 @@
<RuleSetOptions/>
</NAT>
<Policy id="id58" name="Policy" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<PolicyRule id="id60" disabled="False" log="False" position="0" action="Accept" direction="Both" comment="Imported from acl_133&#10;">
<PolicyRule id="id60" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Imported from acl_133&#10;">
<Src neg="False">
<ObjectRef ref="id17"/>
</Src>
@ -514,7 +514,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id72" disabled="False" log="False" position="1" action="Accept" direction="Both" comment="Imported from acl_133&#10;">
<PolicyRule id="id72" disabled="False" group="" log="False" position="1" action="Accept" direction="Both" comment="Imported from acl_133&#10;">
<Src neg="False">
<ObjectRef ref="id18"/>
</Src>
@ -534,7 +534,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id84" disabled="False" log="True" position="2" action="Deny" direction="Both" comment="Imported from acl_133&#10;">
<PolicyRule id="id84" disabled="False" group="" log="True" position="2" action="Deny" direction="Both" comment="Imported from acl_133&#10;">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -554,7 +554,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id96" disabled="False" log="False" position="3" action="Deny" direction="Inbound" comment="Imported from e1_0_acl_in&#10;">
<PolicyRule id="id96" disabled="False" group="" log="False" position="3" action="Deny" direction="Inbound" comment="Imported from e1_0_acl_in&#10;">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -574,7 +574,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id108" disabled="False" log="True" position="4" action="Accept" direction="Inbound" comment="Imported from e1_0_acl_in&#10;">
<PolicyRule id="id108" disabled="False" group="" log="True" position="4" action="Accept" direction="Inbound" comment="Imported from e1_0_acl_in&#10;">
<Src neg="False">
<ObjectRef ref="id3"/>
</Src>
@ -594,7 +594,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id120" disabled="False" log="True" position="5" action="Accept" direction="Inbound" comment="Imported from e1_0_acl_in&#10;">
<PolicyRule id="id120" disabled="False" group="" log="True" position="5" action="Accept" direction="Inbound" comment="Imported from e1_0_acl_in&#10;">
<Src neg="False">
<ObjectRef ref="id3"/>
</Src>
@ -614,7 +614,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id132" disabled="False" log="True" position="6" action="Accept" direction="Inbound" comment="Imported from e1_0_acl_in&#10;">
<PolicyRule id="id132" disabled="False" group="" log="True" position="6" action="Accept" direction="Inbound" comment="Imported from e1_0_acl_in&#10;">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -634,7 +634,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id144" disabled="False" log="True" position="7" action="Deny" direction="Inbound" comment="Imported from e1_0_acl_in&#10;">
<PolicyRule id="id144" disabled="False" group="" log="True" position="7" action="Deny" direction="Inbound" comment="Imported from e1_0_acl_in&#10;">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -654,7 +654,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id156" disabled="False" log="True" position="8" action="Accept" direction="Outbound" comment="Imported from e1_0_acl_out&#10;">
<PolicyRule id="id156" disabled="False" group="" log="True" position="8" action="Accept" direction="Outbound" comment="Imported from e1_0_acl_out&#10;">
<Src neg="False">
<ObjectRef ref="id17"/>
</Src>
@ -674,7 +674,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id168" disabled="False" log="True" position="9" action="Deny" direction="Outbound" comment="Imported from e1_0_acl_out&#10;">
<PolicyRule id="id168" disabled="False" group="" log="True" position="9" action="Deny" direction="Outbound" comment="Imported from e1_0_acl_out&#10;">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -694,7 +694,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id180" disabled="False" log="True" position="10" action="Accept" direction="Inbound" comment="Imported from fe0_0_acl_in&#10;">
<PolicyRule id="id180" disabled="False" group="" log="True" position="10" action="Accept" direction="Inbound" comment="Imported from fe0_0_acl_in&#10;">
<Src neg="False">
<ObjectRef ref="id3"/>
</Src>
@ -714,7 +714,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id192" disabled="False" log="True" position="11" action="Accept" direction="Inbound" comment="Imported from fe0_0_acl_in&#10;">
<PolicyRule id="id192" disabled="False" group="" log="True" position="11" action="Accept" direction="Inbound" comment="Imported from fe0_0_acl_in&#10;">
<Src neg="False">
<ObjectRef ref="id3"/>
</Src>
@ -734,7 +734,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id204" disabled="False" log="True" position="12" action="Accept" direction="Inbound" comment="Imported from fe0_0_acl_in&#10;">
<PolicyRule id="id204" disabled="False" group="" log="True" position="12" action="Accept" direction="Inbound" comment="Imported from fe0_0_acl_in&#10;">
<Src neg="False">
<ObjectRef ref="id17"/>
</Src>
@ -754,7 +754,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id216" disabled="False" log="True" position="13" action="Deny" direction="Inbound" comment="Imported from fe0_0_acl_in&#10;">
<PolicyRule id="id216" disabled="False" group="" log="True" position="13" action="Deny" direction="Inbound" comment="Imported from fe0_0_acl_in&#10;">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -774,7 +774,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id228" disabled="False" log="True" position="14" action="Accept" direction="Outbound" comment="Imported from fe0_0_acl_out&#10;">
<PolicyRule id="id228" disabled="False" group="" log="True" position="14" action="Accept" direction="Outbound" comment="Imported from fe0_0_acl_out&#10;">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -794,7 +794,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id240" disabled="False" log="True" position="15" action="Deny" direction="Outbound" comment="Imported from fe0_0_acl_out&#10;">
<PolicyRule id="id240" disabled="False" group="" log="True" position="15" action="Deny" direction="Outbound" comment="Imported from fe0_0_acl_out&#10;">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>

404
src/unit_tests/ImporterTest/test_data/ipt.fwb
View File

@ -1,6 +1,6 @@
<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE FWObjectDatabase SYSTEM "fwbuilder.dtd">
<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="17" lastModified="1288831958" id="root">
<FWObjectDatabase xmlns="http://www.fwbuilder.org/1.0/" version="17" lastModified="1296002154" id="root">
<Library id="syslib000" color="#d4f8ff" name="Standard" comment="Standard objects" ro="True">
<AnyNetwork id="sysid0" name="Any" comment="Any Network" ro="False" address="0.0.0.0" netmask="0.0.0.0"/>
<AnyIPService id="sysid1" protocol_num="0" name="Any" comment="Any IP Service" ro="False"/>
@ -601,8 +601,8 @@
</ServiceGroup>
<ObjectGroup id="id151" name="Firewalls" comment="" ro="False">
<Firewall id="id152" host_OS="linux24" lastCompiled="0" lastInstalled="0" lastModified="0" platform="iptables" version="" name="test_fw" comment="" ro="False">
<NAT id="id1624" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<NATRule id="id1626" disabled="False" position="0" action="Translate" comment="Original rule defines outbound interface 'eth1'.&#10; Replace address in TSrc with matching interface of the firewall.">
<NAT id="id672" name="NAT" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<NATRule id="id674" disabled="False" group="" position="0" action="Translate" comment="Original rule defines outbound interface 'eth1'.&#10; Replace address in TSrc with matching interface of the firewall.">
<OSrc neg="False">
<ObjectRef ref="id28"/>
</OSrc>
@ -625,7 +625,7 @@
<Option name="color">#C86E6E</Option>
</NATRuleOptions>
</NATRule>
<NATRule id="id1640" disabled="False" position="1" action="Translate" comment="Original rule defines outbound interface 'eth0'.&#10; Replace address in TSrc with matching interface of the firewall.">
<NATRule id="id688" disabled="False" group="" position="1" action="Translate" comment="Original rule defines outbound interface 'eth0'.&#10; Replace address in TSrc with matching interface of the firewall.">
<OSrc neg="False">
<ObjectRef ref="id28"/>
</OSrc>
@ -648,7 +648,7 @@
<Option name="color">#C86E6E</Option>
</NATRuleOptions>
</NATRule>
<NATRule id="id1654" disabled="False" position="2" action="Translate" comment="Original rule defines outbound interface 'eth+'.&#10; Replace address in TSrc with matching interface of the firewall.">
<NATRule id="id702" disabled="False" group="" position="2" action="Translate" comment="Original rule defines outbound interface 'eth+'.&#10; Replace address in TSrc with matching interface of the firewall.">
<OSrc neg="False">
<ObjectRef ref="id29"/>
</OSrc>
@ -671,7 +671,7 @@
<Option name="color">#C86E6E</Option>
</NATRuleOptions>
</NATRule>
<NATRule id="id1668" disabled="False" position="3" action="Translate" comment="Original rule defines outbound interface 'eth+'.&#10; Replace address in TSrc with matching interface of the firewall.">
<NATRule id="id716" disabled="False" group="" position="3" action="Translate" comment="Original rule defines outbound interface 'eth+'.&#10; Replace address in TSrc with matching interface of the firewall.">
<OSrc neg="False">
<ObjectRef ref="id28"/>
</OSrc>
@ -694,7 +694,7 @@
<Option name="color">#C86E6E</Option>
</NATRuleOptions>
</NATRule>
<NATRule id="id1682" disabled="False" position="4" action="Translate" comment="Original rule defines outbound interface 'eth+'.&#10; Replace address in TSrc with matching interface of the firewall.">
<NATRule id="id730" disabled="False" group="" position="4" action="Translate" comment="Original rule defines outbound interface 'eth+'.&#10; Replace address in TSrc with matching interface of the firewall.">
<OSrc neg="False">
<ObjectRef ref="id28"/>
</OSrc>
@ -717,7 +717,7 @@
<Option name="color">#C86E6E</Option>
</NATRuleOptions>
</NATRule>
<NATRule id="id1696" disabled="False" position="5" action="Translate" comment="Original rule defines outbound interface 'eth1'.&#10; Replace address in TSrc with matching interface of the firewall.">
<NATRule id="id744" disabled="False" group="" position="5" action="Translate" comment="Original rule defines outbound interface 'eth1'.&#10; Replace address in TSrc with matching interface of the firewall.">
<OSrc neg="False">
<ObjectRef ref="id13"/>
</OSrc>
@ -740,7 +740,7 @@
<Option name="color">#C86E6E</Option>
</NATRuleOptions>
</NATRule>
<NATRule id="id1710" disabled="False" position="6" action="Translate" comment="">
<NATRule id="id758" disabled="False" group="" position="6" action="Translate" comment="">
<OSrc neg="False">
<ObjectRef ref="id28"/>
</OSrc>
@ -761,7 +761,7 @@
</TSrv>
<NATRuleOptions/>
</NATRule>
<NATRule id="id1724" disabled="False" position="7" action="Translate" comment="">
<NATRule id="id772" disabled="False" group="" position="7" action="Translate" comment="">
<OSrc neg="False">
<ObjectRef ref="id28"/>
<ObjectRef ref="id28"/>
@ -783,7 +783,7 @@
</TSrv>
<NATRuleOptions/>
</NATRule>
<NATRule id="id1739" disabled="False" position="8" action="Translate" comment="">
<NATRule id="id787" disabled="False" group="" position="8" action="Translate" comment="">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -804,7 +804,7 @@
</TSrv>
<NATRuleOptions/>
</NATRule>
<NATRule id="id1753" disabled="False" position="9" action="Translate" comment="">
<NATRule id="id801" disabled="False" group="" position="9" action="Translate" comment="">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -825,7 +825,7 @@
</TSrv>
<NATRuleOptions/>
</NATRule>
<NATRule id="id1767" disabled="False" position="10" action="Translate" comment="">
<NATRule id="id815" disabled="False" group="" position="10" action="Translate" comment="">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -846,7 +846,7 @@
</TSrv>
<NATRuleOptions/>
</NATRule>
<NATRule id="id1781" disabled="False" position="11" action="Translate" comment="">
<NATRule id="id829" disabled="False" group="" position="11" action="Translate" comment="">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -867,7 +867,7 @@
</TSrv>
<NATRuleOptions/>
</NATRule>
<NATRule id="id1795" disabled="False" position="12" action="Translate" comment="">
<NATRule id="id843" disabled="False" group="" position="12" action="Translate" comment="">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -888,7 +888,7 @@
</TSrv>
<NATRuleOptions/>
</NATRule>
<NATRule id="id1809" disabled="False" position="13" action="Translate" comment="">
<NATRule id="id857" disabled="False" group="" position="13" action="Translate" comment="">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -909,7 +909,7 @@
</TSrv>
<NATRuleOptions/>
</NATRule>
<NATRule id="id1823" disabled="False" position="14" action="Translate" comment="Original rule defines inbound interface 'eth0'.&#10; Replace address in ODst with matching interface of the firewall.">
<NATRule id="id871" disabled="False" group="" position="14" action="Translate" comment="Original rule defines inbound interface 'eth0'.&#10; Replace address in ODst with matching interface of the firewall.">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -932,7 +932,7 @@
<Option name="color">#C86E6E</Option>
</NATRuleOptions>
</NATRule>
<NATRule id="id1837" disabled="False" position="15" action="Translate" comment="">
<NATRule id="id885" disabled="False" group="" position="15" action="Translate" comment="">
<OSrc neg="False">
<ObjectRef ref="id28"/>
</OSrc>
@ -953,7 +953,7 @@
</TSrv>
<NATRuleOptions/>
</NATRule>
<NATRule id="id1851" disabled="False" position="16" action="Translate" comment="">
<NATRule id="id899" disabled="False" group="" position="16" action="Translate" comment="">
<OSrc neg="False">
<ObjectRef ref="id28"/>
</OSrc>
@ -974,7 +974,7 @@
</TSrv>
<NATRuleOptions/>
</NATRule>
<NATRule id="id1865" disabled="False" position="17" action="Translate" comment="">
<NATRule id="id913" disabled="False" group="" position="17" action="Translate" comment="">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -995,7 +995,7 @@
</TSrv>
<NATRuleOptions/>
</NATRule>
<NATRule id="id1879" disabled="False" position="18" action="Translate" comment="">
<NATRule id="id927" disabled="False" group="" position="18" action="Translate" comment="">
<OSrc neg="False">
<ObjectRef ref="sysid0"/>
</OSrc>
@ -1019,7 +1019,7 @@
<RuleSetOptions/>
</NAT>
<Policy id="id154" name="Policy" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<PolicyRule id="id156" disabled="False" log="False" position="0" action="Accept" direction="Both" comment="Chain FORWARD. ">
<PolicyRule id="id156" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Chain FORWARD. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1039,7 +1039,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id168" disabled="False" log="False" position="1" action="Accept" direction="Both" comment="Chain FORWARD. ">
<PolicyRule id="id168" disabled="False" group="" log="False" position="1" action="Accept" direction="Both" comment="Chain FORWARD. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1059,7 +1059,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id180" disabled="False" log="False" position="2" action="Accept" direction="Both" comment="Chain OUTPUT. ">
<PolicyRule id="id180" disabled="False" group="" log="False" position="2" action="Accept" direction="Both" comment="Chain OUTPUT. ">
<Src neg="False">
<ObjectRef ref="id152"/>
</Src>
@ -1079,7 +1079,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id192" disabled="False" log="False" position="3" action="Accept" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id192" disabled="False" group="" log="False" position="3" action="Accept" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1099,7 +1099,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id204" disabled="False" log="False" position="4" action="Branch" direction="Both" comment="Chain OUTPUT. ">
<PolicyRule id="id204" disabled="False" group="" log="False" position="4" action="Branch" direction="Both" comment="Chain OUTPUT. ">
<Src neg="False">
<ObjectRef ref="id152"/>
</Src>
@ -1116,12 +1116,12 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id205</Option>
<Option name="branch_id">id1571</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id230" disabled="False" log="False" position="5" action="Branch" direction="Both" comment="Chain OUTPUT. ">
<PolicyRule id="id216" disabled="False" group="" log="False" position="5" action="Branch" direction="Both" comment="Chain OUTPUT. ">
<Src neg="False">
<ObjectRef ref="id152"/>
</Src>
@ -1138,12 +1138,12 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id231</Option>
<Option name="branch_id">id1585</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id256" disabled="False" log="False" position="6" action="Accept" direction="Inbound" comment="Chain INPUT. ">
<PolicyRule id="id228" disabled="False" group="" log="False" position="6" action="Accept" direction="Inbound" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1154,7 +1154,7 @@
<ServiceRef ref="sysid1"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1897"/>
<ObjectRef ref="id1601"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -1163,7 +1163,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id268" disabled="False" log="False" position="7" action="Branch" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id240" disabled="False" group="" log="False" position="7" action="Branch" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1180,12 +1180,12 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id269</Option>
<Option name="branch_id">id943</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1020" disabled="False" log="False" position="8" action="Branch" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id252" disabled="False" group="" log="False" position="8" action="Branch" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1202,12 +1202,12 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1021</Option>
<Option name="branch_id">id1602</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1202" disabled="False" log="False" position="9" action="Branch" direction="Inbound" comment="Chain FORWARD. Both inbound and outbound interfaces in original iptables command: -i eth0 -o eth1">
<PolicyRule id="id264" disabled="False" group="" log="False" position="9" action="Branch" direction="Inbound" comment="Chain FORWARD. Both inbound and outbound interfaces in original iptables command: -i eth0 -o eth1">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1218,18 +1218,18 @@
<ServiceRef ref="id130"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id1203</Option>
<Option name="branch_id">id1772</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1228" disabled="False" log="False" position="10" action="Reject" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id276" disabled="False" group="" log="False" position="10" action="Reject" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1250,7 +1250,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1240" disabled="False" log="False" position="11" action="Reject" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id288" disabled="False" group="" log="False" position="11" action="Reject" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1271,7 +1271,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1252" disabled="False" log="False" position="12" action="Reject" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id300" disabled="False" group="" log="False" position="12" action="Reject" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1292,7 +1292,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1264" disabled="False" log="False" position="13" action="Reject" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id312" disabled="False" group="" log="False" position="13" action="Reject" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1313,7 +1313,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1276" disabled="False" log="False" position="14" action="Reject" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id324" disabled="False" group="" log="False" position="14" action="Reject" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1334,7 +1334,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1288" disabled="False" log="False" position="15" action="Reject" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id336" disabled="False" group="" log="False" position="15" action="Reject" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1355,7 +1355,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1300" disabled="False" log="False" position="16" action="Reject" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id348" disabled="False" group="" log="False" position="16" action="Reject" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1376,7 +1376,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1312" disabled="False" log="False" position="17" action="Reject" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id360" disabled="False" group="" log="False" position="17" action="Reject" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1397,7 +1397,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1324" disabled="False" log="False" position="18" action="Reject" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id372" disabled="False" group="" log="False" position="18" action="Reject" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1418,7 +1418,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1336" disabled="False" log="False" position="19" action="Reject" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id384" disabled="False" group="" log="False" position="19" action="Reject" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1439,7 +1439,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1348" disabled="False" log="False" position="20" action="Reject" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id396" disabled="False" group="" log="False" position="20" action="Reject" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1460,7 +1460,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1360" disabled="False" log="False" position="21" action="Reject" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id408" disabled="False" group="" log="False" position="21" action="Reject" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1481,7 +1481,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1372" disabled="False" log="False" position="22" action="Reject" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id420" disabled="False" group="" log="False" position="22" action="Reject" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1502,7 +1502,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1384" disabled="False" log="False" position="23" action="Reject" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id432" disabled="False" group="" log="False" position="23" action="Reject" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1523,7 +1523,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1396" disabled="False" log="False" position="24" action="Reject" direction="Both" comment="Chain INPUT. ">
<PolicyRule id="id444" disabled="False" group="" log="False" position="24" action="Reject" direction="Both" comment="Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1544,7 +1544,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1408" disabled="False" log="False" position="25" action="Reject" direction="Both" comment="Unknown parameter of target REJECT: icmp-foo-prohibited. Chain INPUT. ">
<PolicyRule id="id456" disabled="False" group="" log="False" position="25" action="Reject" direction="Both" comment="Unknown parameter of target REJECT: icmp-foo-prohibited. Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1566,7 +1566,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1420" disabled="False" log="False" position="26" action="Reject" direction="Both" comment="Unknown parameter of target REJECT: foo-prohib. Chain INPUT. ">
<PolicyRule id="id468" disabled="False" group="" log="False" position="26" action="Reject" direction="Both" comment="Unknown parameter of target REJECT: foo-prohib. Chain INPUT. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1588,7 +1588,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1432" disabled="False" log="False" position="27" action="Branch" direction="Both" comment="Chain OUTPUT. ">
<PolicyRule id="id480" disabled="False" group="" log="False" position="27" action="Branch" direction="Both" comment="Chain OUTPUT. ">
<Src neg="False">
<ObjectRef ref="id152"/>
</Src>
@ -1605,12 +1605,12 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id269</Option>
<Option name="branch_id">id943</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1444" disabled="False" log="False" position="28" action="Accept" direction="Both" comment="Chain FORWARD. ">
<PolicyRule id="id492" disabled="False" group="" log="False" position="28" action="Accept" direction="Both" comment="Chain FORWARD. ">
<Src neg="False">
<ObjectRef ref="id33"/>
</Src>
@ -1630,7 +1630,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1456" disabled="False" log="False" position="29" action="Accept" direction="Both" comment="Chain FORWARD. ">
<PolicyRule id="id504" disabled="False" group="" log="False" position="29" action="Accept" direction="Both" comment="Chain FORWARD. ">
<Src neg="False">
<ObjectRef ref="id4"/>
</Src>
@ -1650,7 +1650,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1468" disabled="False" log="False" position="30" action="Accept" direction="Both" comment="Chain FORWARD. ">
<PolicyRule id="id516" disabled="False" group="" log="False" position="30" action="Accept" direction="Both" comment="Chain FORWARD. ">
<Src neg="False">
<ObjectRef ref="id33"/>
</Src>
@ -1670,7 +1670,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1480" disabled="False" log="False" position="31" action="Accept" direction="Both" comment="Chain FORWARD. ">
<PolicyRule id="id528" disabled="False" group="" log="False" position="31" action="Accept" direction="Both" comment="Chain FORWARD. ">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -1690,7 +1690,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1492" disabled="False" log="True" position="32" action="Continue" direction="Both" comment="Chain FORWARD. ">
<PolicyRule id="id540" disabled="False" group="" log="True" position="32" action="Continue" direction="Both" comment="Chain FORWARD. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1715,7 +1715,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1504" disabled="False" log="False" position="33" action="Tag" direction="Inbound" comment="Chain FORWARD. ">
<PolicyRule id="id552" disabled="False" group="" log="False" position="33" action="Tag" direction="Inbound" comment="Chain FORWARD. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1726,7 +1726,7 @@
<ServiceRef ref="id114"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1898"/>
<ObjectRef ref="id1786"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -1737,7 +1737,7 @@
<Option name="tagobject_id">id146</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1516" disabled="False" log="False" position="34" action="Tag" direction="Inbound" comment="Chain FORWARD. ">
<PolicyRule id="id564" disabled="False" group="" log="False" position="34" action="Tag" direction="Inbound" comment="Chain FORWARD. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1748,7 +1748,7 @@
<ServiceRef ref="id114"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1898"/>
<ObjectRef ref="id1786"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -1759,7 +1759,7 @@
<Option name="tagobject_id">id147</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1528" disabled="False" log="False" position="35" action="Tag" direction="Inbound" comment="Chain FORWARD. ">
<PolicyRule id="id576" disabled="False" group="" log="False" position="35" action="Tag" direction="Inbound" comment="Chain FORWARD. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1770,7 +1770,7 @@
<ServiceRef ref="id114"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1898"/>
<ObjectRef ref="id1786"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -1781,7 +1781,7 @@
<Option name="tagobject_id">id148</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1540" disabled="False" log="False" position="36" action="Tag" direction="Inbound" comment="Chain PREROUTING. ">
<PolicyRule id="id588" disabled="False" group="" log="False" position="36" action="Tag" direction="Inbound" comment="Chain PREROUTING. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1792,7 +1792,7 @@
<ServiceRef ref="id114"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1898"/>
<ObjectRef ref="id1786"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -1803,7 +1803,7 @@
<Option name="tagobject_id">id146</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1552" disabled="False" log="False" position="37" action="Tag" direction="Outbound" comment="Chain POSTROUTING. ">
<PolicyRule id="id600" disabled="False" group="" log="False" position="37" action="Tag" direction="Outbound" comment="Chain POSTROUTING. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1814,7 +1814,7 @@
<ServiceRef ref="id115"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1898"/>
<ObjectRef ref="id1786"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -1826,7 +1826,7 @@
<Option name="tagobject_id">id146</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1564" disabled="False" log="False" position="38" action="Route" direction="Both" comment="Chain POSTROUTING. ">
<PolicyRule id="id612" disabled="False" group="" log="False" position="38" action="Route" direction="Both" comment="Chain POSTROUTING. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1851,7 +1851,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1576" disabled="False" log="False" position="39" action="Route" direction="Both" comment="Chain POSTROUTING. ">
<PolicyRule id="id624" disabled="False" group="" log="False" position="39" action="Route" direction="Both" comment="Chain POSTROUTING. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1876,7 +1876,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1588" disabled="False" log="False" position="40" action="Custom" direction="Both" comment="Chain POSTROUTING. ">
<PolicyRule id="id636" disabled="False" group="" log="False" position="40" action="Custom" direction="Both" comment="Chain POSTROUTING. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1897,7 +1897,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1600" disabled="False" log="False" position="41" action="Custom" direction="Both" comment="Chain POSTROUTING. ">
<PolicyRule id="id648" disabled="False" group="" log="False" position="41" action="Custom" direction="Both" comment="Chain POSTROUTING. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1918,7 +1918,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1612" disabled="False" log="False" position="42" action="Accept" direction="Outbound" comment="Default iptables policy in filter/OUTPUT">
<PolicyRule id="id660" disabled="False" group="" log="False" position="42" action="Accept" direction="Outbound" comment="Default iptables policy in filter/OUTPUT">
<Src neg="False">
<ObjectRef ref="id152"/>
</Src>
@ -1940,8 +1940,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id269" name="user_chain" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id271" disabled="False" log="False" position="0" action="Accept" direction="Both" comment="Chain user_chain. ">
<Policy id="id943" name="user_chain" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id945" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -1961,7 +1961,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id283" disabled="False" log="False" position="1" action="Accept" direction="Inbound" comment="Chain user_chain. ">
<PolicyRule id="id957" disabled="False" group="" log="False" position="1" action="Accept" direction="Inbound" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -1972,7 +1972,7 @@
<ServiceRef ref="id72"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -1981,7 +1981,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id295" disabled="False" log="False" position="2" action="Continue" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id969" disabled="False" group="" log="False" position="2" action="Continue" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id26"/>
</Src>
@ -2001,7 +2001,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id307" disabled="False" log="False" position="3" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id981" disabled="False" group="" log="False" position="3" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2021,7 +2021,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id319" disabled="False" log="False" position="4" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id993" disabled="False" group="" log="False" position="4" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id27"/>
</Src>
@ -2041,7 +2041,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id331" disabled="False" log="False" position="5" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1005" disabled="False" group="" log="False" position="5" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id7"/>
</Src>
@ -2061,7 +2061,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id343" disabled="False" log="False" position="6" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1017" disabled="False" group="" log="False" position="6" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2081,7 +2081,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id355" disabled="False" log="False" position="7" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1029" disabled="False" group="" log="False" position="7" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2101,7 +2101,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id367" disabled="False" log="False" position="8" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1041" disabled="False" group="" log="False" position="8" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id8"/>
</Src>
@ -2121,7 +2121,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id379" disabled="False" log="False" position="9" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1053" disabled="False" group="" log="False" position="9" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id27"/>
</Src>
@ -2141,7 +2141,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id391" disabled="False" log="False" position="10" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1065" disabled="False" group="" log="False" position="10" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id27"/>
</Src>
@ -2161,7 +2161,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id403" disabled="False" log="False" position="11" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1077" disabled="False" group="" log="False" position="11" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id27"/>
</Src>
@ -2181,7 +2181,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id415" disabled="False" log="False" position="12" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1089" disabled="False" group="" log="False" position="12" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2201,7 +2201,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id427" disabled="False" log="False" position="13" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1101" disabled="False" group="" log="False" position="13" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2221,7 +2221,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id439" disabled="False" log="False" position="14" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1113" disabled="False" group="" log="False" position="14" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2241,7 +2241,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id451" disabled="False" log="False" position="15" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1125" disabled="False" group="" log="False" position="15" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2261,7 +2261,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id463" disabled="False" log="False" position="16" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1137" disabled="False" group="" log="False" position="16" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2281,7 +2281,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id475" disabled="False" log="False" position="17" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1149" disabled="False" group="" log="False" position="17" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2301,7 +2301,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id487" disabled="False" log="False" position="18" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1161" disabled="False" group="" log="False" position="18" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id8"/>
</Src>
@ -2321,7 +2321,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id499" disabled="False" log="False" position="19" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1173" disabled="False" group="" log="False" position="19" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2341,7 +2341,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id511" disabled="False" log="False" position="20" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1185" disabled="False" group="" log="False" position="20" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id9"/>
</Src>
@ -2361,7 +2361,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id523" disabled="False" log="False" position="21" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1197" disabled="False" group="" log="False" position="21" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id9"/>
</Src>
@ -2381,7 +2381,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id535" disabled="False" log="False" position="22" action="Accept" direction="Both" comment="Port spec 'foo' unknown. Error basic_ios::clear&#10;Port spec 'foo' unknown. Error basic_ios::clearChain user_chain. ">
<PolicyRule id="id1209" disabled="False" group="" log="False" position="22" action="Accept" direction="Both" comment="Port spec 'foo' unknown. Error basic_ios::clear&#10;Port spec 'foo' unknown. Error basic_ios::clearChain user_chain. ">
<Src neg="False">
<ObjectRef ref="id24"/>
</Src>
@ -2402,7 +2402,7 @@
<Option name="stateless">False</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id547" disabled="False" log="True" position="23" action="Continue" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1221" disabled="False" group="" log="True" position="23" action="Continue" direction="Both" comment="Chain user_chain. ">
<Src neg="True">
<ObjectRef ref="id25"/>
</Src>
@ -2429,7 +2429,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id559" disabled="False" log="False" position="24" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1233" disabled="False" group="" log="False" position="24" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2449,7 +2449,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id571" disabled="False" log="False" position="25" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1245" disabled="False" group="" log="False" position="25" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2469,7 +2469,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id583" disabled="False" log="False" position="26" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1257" disabled="False" group="" log="False" position="26" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2489,7 +2489,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id595" disabled="False" log="False" position="27" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1269" disabled="False" group="" log="False" position="27" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2509,7 +2509,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id607" disabled="False" log="False" position="28" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1281" disabled="False" group="" log="False" position="28" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2529,7 +2529,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id619" disabled="False" log="False" position="29" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1293" disabled="False" group="" log="False" position="29" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2549,7 +2549,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id631" disabled="False" log="False" position="30" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1305" disabled="False" group="" log="False" position="30" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2569,7 +2569,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id643" disabled="False" log="False" position="31" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1317" disabled="False" group="" log="False" position="31" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2589,7 +2589,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id655" disabled="False" log="False" position="32" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1329" disabled="False" group="" log="False" position="32" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2609,7 +2609,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id667" disabled="False" log="False" position="33" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1341" disabled="False" group="" log="False" position="33" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2629,7 +2629,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id679" disabled="False" log="False" position="34" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1353" disabled="False" group="" log="False" position="34" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2649,7 +2649,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id691" disabled="False" log="False" position="35" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1365" disabled="False" group="" log="False" position="35" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2670,7 +2670,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id704" disabled="False" log="False" position="36" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1378" disabled="False" group="" log="False" position="36" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2691,7 +2691,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id717" disabled="False" log="False" position="37" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1391" disabled="False" group="" log="False" position="37" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2711,7 +2711,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id729" disabled="False" log="False" position="38" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1403" disabled="False" group="" log="False" position="38" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2731,7 +2731,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id741" disabled="False" log="False" position="39" action="Accept" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1415" disabled="False" group="" log="False" position="39" action="Accept" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2751,7 +2751,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id753" disabled="False" log="False" position="40" action="Deny" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1427" disabled="False" group="" log="False" position="40" action="Deny" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2771,7 +2771,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id765" disabled="False" log="False" position="41" action="Deny" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1439" disabled="False" group="" log="False" position="41" action="Deny" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2791,7 +2791,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id777" disabled="False" log="False" position="42" action="Branch" direction="Inbound" comment="Chain user_chain. ">
<PolicyRule id="id1451" disabled="False" group="" log="False" position="42" action="Branch" direction="Inbound" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2802,18 +2802,18 @@
<ServiceRef ref="id83"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id778</Option>
<Option name="branch_id">id1788</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id803" disabled="False" log="False" position="43" action="Branch" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1463" disabled="False" group="" log="False" position="43" action="Branch" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2830,12 +2830,12 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id804</Option>
<Option name="branch_id">id1802</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id829" disabled="False" log="False" position="44" action="Branch" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1475" disabled="False" group="" log="False" position="44" action="Branch" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="id25"/>
</Src>
@ -2852,12 +2852,12 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id830</Option>
<Option name="branch_id">id1816</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id855" disabled="False" log="False" position="45" action="Branch" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1487" disabled="False" group="" log="False" position="45" action="Branch" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2874,12 +2874,12 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id856</Option>
<Option name="branch_id">id1830</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id881" disabled="False" log="False" position="46" action="Branch" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1499" disabled="False" group="" log="False" position="46" action="Branch" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2896,12 +2896,12 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id882</Option>
<Option name="branch_id">id1844</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id907" disabled="False" log="False" position="47" action="Branch" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1511" disabled="False" group="" log="False" position="47" action="Branch" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2918,12 +2918,12 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id908</Option>
<Option name="branch_id">id1858</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id933" disabled="False" log="False" position="48" action="Branch" direction="Both" comment="Chain user_chain. &#10;Original rule combines match of tcp/udp/icmp &#10;protocols with two or more module matches, such as &#10;module 'mark', 'recent' or 'length'. Use additional &#10;branches to implement this complex match.">
<PolicyRule id="id1523" disabled="False" group="" log="False" position="48" action="Branch" direction="Both" comment="Chain user_chain. &#10;Original rule combines match of tcp/udp/icmp &#10;protocols with two or more module matches, such as &#10;module 'mark', 'recent' or 'length'. Use additional &#10;branches to implement this complex match.">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2940,13 +2940,13 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id934</Option>
<Option name="branch_id">id1872</Option>
<Option name="color">#C86E6E</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id959" disabled="False" log="False" position="49" action="Branch" direction="Both" comment="Chain user_chain. &#10;Original rule combines match of tcp/udp/icmp &#10;protocols with two or more module matches, such as &#10;module 'mark', 'recent' or 'length'. Use additional &#10;branches to implement this complex match.">
<PolicyRule id="id1535" disabled="False" group="" log="False" position="49" action="Branch" direction="Both" comment="Chain user_chain. &#10;Original rule combines match of tcp/udp/icmp &#10;protocols with two or more module matches, such as &#10;module 'mark', 'recent' or 'length'. Use additional &#10;branches to implement this complex match.">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2963,13 +2963,13 @@
<IntervalRef ref="sysid2"/>
</When>
<PolicyRuleOptions>
<Option name="branch_id">id960</Option>
<Option name="branch_id">id1886</Option>
<Option name="color">#C86E6E</Option>
<Option name="stateless">True</Option>
<Option name="tagobject_id"></Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id985" disabled="False" log="False" position="50" action="Deny" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1547" disabled="False" group="" log="False" position="50" action="Deny" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -2989,7 +2989,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id997" disabled="False" log="False" position="51" action="Deny" direction="Both" comment="Chain user_chain. ">
<PolicyRule id="id1559" disabled="False" group="" log="False" position="51" action="Deny" direction="Both" comment="Chain user_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3011,8 +3011,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id205" name="OUTPUT_established_0" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id207" disabled="False" log="False" position="0" action="Accept" direction="Both" comment="">
<Policy id="id1571" name="OUTPUT_established_0" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1573" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3034,8 +3034,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id231" name="OUTPUT_established_1" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id233" disabled="False" log="False" position="0" action="Deny" direction="Both" comment="">
<Policy id="id1585" name="OUTPUT_established_1" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1587" disabled="False" group="" log="False" position="0" action="Deny" direction="Both" comment="">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3057,11 +3057,11 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1895" name="drop_invalid" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<Policy id="id1599" name="drop_invalid" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<RuleSetOptions/>
</Policy>
<Policy id="id1021" name="scan_checks_chain" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1023" disabled="False" log="True" position="0" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. ">
<Policy id="id1602" name="scan_checks_chain" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1604" disabled="False" group="" log="True" position="0" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3072,7 +3072,7 @@
<ServiceRef ref="id90"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3088,7 +3088,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1035" disabled="False" log="True" position="1" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. ">
<PolicyRule id="id1616" disabled="False" group="" log="True" position="1" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3099,7 +3099,7 @@
<ServiceRef ref="id91"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3115,7 +3115,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1047" disabled="False" log="True" position="2" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. ">
<PolicyRule id="id1628" disabled="False" group="" log="True" position="2" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3126,7 +3126,7 @@
<ServiceRef ref="id92"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3142,7 +3142,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1059" disabled="False" log="True" position="3" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. ">
<PolicyRule id="id1640" disabled="False" group="" log="True" position="3" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3153,7 +3153,7 @@
<ServiceRef ref="id93"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3169,7 +3169,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1071" disabled="False" log="True" position="4" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. ">
<PolicyRule id="id1652" disabled="False" group="" log="True" position="4" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3180,7 +3180,7 @@
<ServiceRef ref="id94"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3196,7 +3196,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1083" disabled="False" log="True" position="5" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. ">
<PolicyRule id="id1664" disabled="False" group="" log="True" position="5" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3207,7 +3207,7 @@
<ServiceRef ref="id95"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3223,7 +3223,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1095" disabled="False" log="True" position="6" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. ">
<PolicyRule id="id1676" disabled="False" group="" log="True" position="6" action="Continue" direction="Inbound" comment="Chain scan_checks_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3234,7 +3234,7 @@
<ServiceRef ref="id96"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3250,7 +3250,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1107" disabled="False" log="False" position="7" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. ">
<PolicyRule id="id1688" disabled="False" group="" log="False" position="7" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3261,7 +3261,7 @@
<ServiceRef ref="id90"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3270,7 +3270,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1119" disabled="False" log="False" position="8" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. ">
<PolicyRule id="id1700" disabled="False" group="" log="False" position="8" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3281,7 +3281,7 @@
<ServiceRef ref="id91"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3290,7 +3290,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1131" disabled="False" log="False" position="9" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. ">
<PolicyRule id="id1712" disabled="False" group="" log="False" position="9" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3301,7 +3301,7 @@
<ServiceRef ref="id92"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3310,7 +3310,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1143" disabled="False" log="False" position="10" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. ">
<PolicyRule id="id1724" disabled="False" group="" log="False" position="10" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3321,7 +3321,7 @@
<ServiceRef ref="id93"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3330,7 +3330,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1155" disabled="False" log="False" position="11" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. ">
<PolicyRule id="id1736" disabled="False" group="" log="False" position="11" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3341,7 +3341,7 @@
<ServiceRef ref="id94"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3350,7 +3350,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1167" disabled="False" log="False" position="12" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. ">
<PolicyRule id="id1748" disabled="False" group="" log="False" position="12" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3361,7 +3361,7 @@
<ServiceRef ref="id95"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3370,7 +3370,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1179" disabled="False" log="False" position="13" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. ">
<PolicyRule id="id1760" disabled="False" group="" log="False" position="13" action="Deny" direction="Inbound" comment="Chain scan_checks_chain. ">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3381,7 +3381,7 @@
<ServiceRef ref="id96"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1899"/>
<ObjectRef ref="id1787"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3392,8 +3392,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id1203" name="Policy_eth1" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1205" disabled="False" log="False" position="0" action="Accept" direction="Outbound" comment="Called from ruleset Policy, rule 9">
<Policy id="id1772" name="Policy_eth1" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1774" disabled="False" group="" log="False" position="0" action="Accept" direction="Outbound" comment="Called from ruleset Policy, rule 9">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3404,7 +3404,7 @@
<ServiceRef ref="sysid1"/>
</Srv>
<Itf neg="False">
<ObjectRef ref="id1898"/>
<ObjectRef ref="id1786"/>
</Itf>
<When neg="False">
<IntervalRef ref="sysid2"/>
@ -3415,8 +3415,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id778" name="user_chain_42_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id780" disabled="False" log="False" position="0" action="Deny" direction="Inbound" comment="Called from ruleset user_chain, rule 42">
<Policy id="id1788" name="user_chain_42_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1790" disabled="False" group="" log="False" position="0" action="Deny" direction="Inbound" comment="Called from ruleset user_chain, rule 42">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3438,8 +3438,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id804" name="user_chain_43_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id806" disabled="False" log="False" position="0" action="Deny" direction="Both" comment="Called from ruleset user_chain, rule 43">
<Policy id="id1802" name="user_chain_43_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1804" disabled="False" group="" log="False" position="0" action="Deny" direction="Both" comment="Called from ruleset user_chain, rule 43">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3461,8 +3461,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id830" name="user_chain_44_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id832" disabled="False" log="False" position="0" action="Deny" direction="Both" comment="Called from ruleset user_chain, rule 44">
<Policy id="id1816" name="user_chain_44_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1818" disabled="False" group="" log="False" position="0" action="Deny" direction="Both" comment="Called from ruleset user_chain, rule 44">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3484,8 +3484,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id856" name="user_chain_45_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id858" disabled="False" log="False" position="0" action="Deny" direction="Both" comment="Called from ruleset user_chain, rule 45">
<Policy id="id1830" name="user_chain_45_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1832" disabled="False" group="" log="False" position="0" action="Deny" direction="Both" comment="Called from ruleset user_chain, rule 45">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3507,8 +3507,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id882" name="user_chain_46_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id884" disabled="False" log="False" position="0" action="Tag" direction="Both" comment="Called from ruleset user_chain, rule 46">
<Policy id="id1844" name="user_chain_46_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1846" disabled="False" group="" log="False" position="0" action="Tag" direction="Both" comment="Called from ruleset user_chain, rule 46">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3532,8 +3532,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id908" name="user_chain_47_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id910" disabled="False" log="False" position="0" action="Tag" direction="Both" comment="Called from ruleset user_chain, rule 47">
<Policy id="id1858" name="user_chain_47_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1860" disabled="False" group="" log="False" position="0" action="Tag" direction="Both" comment="Called from ruleset user_chain, rule 47">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3557,8 +3557,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id934" name="user_chain_48_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id936" disabled="False" log="False" position="0" action="Accept" direction="Both" comment="Called from ruleset user_chain, rule 48">
<Policy id="id1872" name="user_chain_48_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1874" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Called from ruleset user_chain, rule 48">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3580,8 +3580,8 @@
</PolicyRule>
<RuleSetOptions/>
</Policy>
<Policy id="id960" name="user_chain_49_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id962" disabled="False" log="False" position="0" action="Accept" direction="Both" comment="Called from ruleset user_chain, rule 49">
<Policy id="id1886" name="user_chain_49_mod_match" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="False">
<PolicyRule id="id1888" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Called from ruleset user_chain, rule 49">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3604,7 +3604,7 @@
<RuleSetOptions/>
</Policy>
<Policy id="id1900" name="Mangle" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<PolicyRule id="id1902" disabled="False" log="False" position="0" action="Accept" direction="Both" comment="Can not reproduce default action in table 'mangle' chain 'FORWARD'.">
<PolicyRule id="id1902" disabled="False" group="" log="False" position="0" action="Accept" direction="Both" comment="Can not reproduce default action in table 'mangle' chain 'FORWARD'.">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3625,7 +3625,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1914" disabled="False" log="False" position="1" action="Accept" direction="Inbound" comment="Can not reproduce default action in table 'mangle' chain 'INPUT'.">
<PolicyRule id="id1914" disabled="False" group="" log="False" position="1" action="Accept" direction="Inbound" comment="Can not reproduce default action in table 'mangle' chain 'INPUT'.">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3646,7 +3646,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1926" disabled="False" log="False" position="2" action="Accept" direction="Outbound" comment="Default iptables policy in mangle/OUTPUT">
<PolicyRule id="id1926" disabled="False" group="" log="False" position="2" action="Accept" direction="Outbound" comment="Default iptables policy in mangle/OUTPUT">
<Src neg="False">
<ObjectRef ref="id152"/>
</Src>
@ -3666,7 +3666,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1938" disabled="False" log="False" position="3" action="Accept" direction="Outbound" comment="Default iptables policy in mangle/POSTROUTING">
<PolicyRule id="id1938" disabled="False" group="" log="False" position="3" action="Accept" direction="Outbound" comment="Default iptables policy in mangle/POSTROUTING">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3686,7 +3686,7 @@
<Option name="stateless">True</Option>
</PolicyRuleOptions>
</PolicyRule>
<PolicyRule id="id1950" disabled="False" log="False" position="4" action="Accept" direction="Inbound" comment="Default iptables policy in mangle/PREROUTING">
<PolicyRule id="id1950" disabled="False" group="" log="False" position="4" action="Accept" direction="Inbound" comment="Default iptables policy in mangle/PREROUTING">
<Src neg="False">
<ObjectRef ref="sysid0"/>
</Src>
@ -3710,12 +3710,12 @@
<Option name="mangle_only_rule_set">True</Option>
</RuleSetOptions>
</Policy>
<Routing id="id1893" name="Routing" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<Routing id="id941" name="Routing" comment="" ro="False" ipv4_rule_set="False" ipv6_rule_set="False" top_rule_set="True">
<RuleSetOptions/>
</Routing>
<Interface id="id1897" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="lo" comment="" ro="False"/>
<Interface id="id1898" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="eth1" comment="" ro="False"/>
<Interface id="id1899" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="eth0" comment="" ro="False"/>
<Interface id="id1601" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="lo" comment="" ro="False"/>
<Interface id="id1786" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="eth1" comment="" ro="False"/>
<Interface id="id1787" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="eth0" comment="" ro="False"/>
<Interface id="id1962" dedicated_failover="False" dyn="False" security_level="0" unnum="True" unprotected="False" name="eth2" comment="" ro="False"/>
<Management address="0.0.0.0">
<SNMPManagement enabled="False" snmp_read_community="" snmp_write_community=""/>