false False False false false false false false false false false True True False False False False False False False False False False False false False false False false false false -m ip_conntrack_talk -m ip_nat_talk proto {tcp udp icmp gre} True True True True 0 ** RULE %N True True 0 0 0 4 False 0 10 10 0 False False 0 0 False False False False 3 15 10 10 0 True False 0 75 2 10 True False 0 0 0 0 0 0 True False False ICMP net unreachable True False True False False True True True False True /second 0 0 30 1800 False True False debug /second 0 RULE %N - %A False False True 192.168.1.100 True True False False 0 1 0 0 False 12000 6000 True True True True True True True True 10 10 4000 1000 10000 1000000 1000 10 10 10 False False 1460 1 False False True False False True True True True True True True True True True True True True True True 30 60 86400 60 120 120 40 15 10 10 10 iptables fw_file echo 'This is prolog script' False True True True True True True True /minute 10 True /minute 10 True True True True /minute 10 True True True True True True ICMP net unreachable True False False False False False True True False True /day 0 0 30 1800 False False False debug /second 0 False False True False False False False False 0 0 False False True False False 0 0 5000 1000 0 0 0 False False 1460 1 False False True False False False False False True False False False False False False False False False True False False False 0 0 0 0 0 0 30 10 0 0 0 iptables pf_file_top # prolog: # some pf command at the very top of the .conf file goes here False False False True True False False ICMP net unreachable True False False False False True True True True /second 0 0 30 1800 False True False debug /second 0 False False True True False False 0 1 0 0 False True 5000 10000 False False 1460 1 False False False False 30 10 iptables False True #C0BA44 #C0BA44 #C0BA44 #C0BA44 #C0BA44 #C0BA44 #C0BA44 #C0BA44 #C0BA44 True 0 Iface: %I RULE %N -- %A ** True 0 Iface: %I RULE %N -- %A ** True 0 Iface: %I RULE %N -- %A ** True 0 Iface: %I RULE %N -- %A ** True 0 Iface: %I RULE %N -- %A ** True True TCP RST 0 IDENT True True True True ICMP net unreachable False False False False False False True True False True /second 0 0 0 1 1 1 1 1 30 1800 False True False debug /second 0 RULE %N - %A ** False False True 192.168.1.100 True False False False False 0 0 True False True False False True False False 0 0 5000 0 10000 0 0 Aggressive 0 0 0 False False 1460 32 True True True True True False False False False False False False False True False True True False False False 0 0 10 0 5 5 30 10 0 0 0 iptables pf_file_after_set # prolog # prolog commands go after set commands True True False True True True True True True True True False True ICMP net unreachable True False False False False False True True False True /day 0 0 30 1800 False False False debug /second 0 False False True False False False False False 0 0 False False False False False 0 0 5000 10000 0 0 0 False False 1460 1 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 iptables pf_file_after_tables # prolog commands go after table definitions False False False 0 True 0 True True False False ICMP net unreachable False False False False False True True True True /second 0 0 30 1800 False True False debug /second 0 False False True True False False 0 1 0 0 False False 5000 10000 False False 1460 1 False False True False False 30 10 iptables False True True True True True ICMP net unreachable True False False False False True True False True /day 0 0 30 1800 False False False debug /second 0 False False True False False False False True 5000 10000 False False 1460 1 False False False False 30 10 iptables False False False True True True True ICMP net unreachable True False False False False True True False True /day 0 0 30 1800 False False False debug /second 0 False False True False False False False True 5000 10000 False False 1460 1 False False False False 30 10 iptables False False False True True True True False False False /etc False True False False False 1 /usr/sbin/pfctl /usr/sbin/sysctl False True 5000 10000 False False 1460 1 False False False False 30 10 True True True True True ICMP net unreachable True False False False False True True False True /day 0 0 30 1800 False False False debug /second 0 False False True False False False False True 5000 10000 False False 1460 1 False False False False 30 10 iptables False False False True True True True True True ICMP net unreachable False False False True False False False True True False /day 0 30 1800 False False False False False False debug /second 0 RULE %N -- %A on %I False False True False False False iptables top False 0 1 1 False False False False False True True True True True True True False 5 True True spammers False False 0 0 0 0 0 False False True True True ICMP net unreachable False False False True False False False True True False /day 0 30 1800 False False False False False False debug /second 0 RULE %N -- %A on %I False False True False False False iptables top False 0 1 1 False False False False False 0 0 id43F4556A28869 mail 0 0 True True True True ICMP net unreachable False False False False False False True True False True /day 0 0 30 1800 False False False debug /second 0 False False True False False False False False 0 0 False False True False False 0 0 5000 10000 0 0 0 False False 1460 1 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 iptables False False False True False True False False False False True False False False False True False False False False False False False False False True False False False False True False True False False False True False False True 0 0 1000 False False true True True True False true False /etc true 1 False True 0 1 true false info RULE %N -- %A lo0 1 True False False 1 False 0 0 False False False False False 0 0 5000 10000 0 0 0 False False 1460 0 True True True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 true true 300 false true true true true false true false true pf_file_after_scrub # prolog # prolog commands go after scrub commands $ # 1 1 true 0 0 id43F4556A28869 rule2_branch True rule3_branch True rule5_branch True mail 0 0 True True True True True True ICMP net unreachable False False False False False False True True False True /day 0 0 30 1800 False False False debug /second 0 False False True False False False False False 0 0 False False True False False 0 0 5000 10000 0 0 0 False False 1460 1 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 iptables False False False True 0 0 0 False True 0 0 0 False True route_through 2 0 0 False False False False 192.0.2.10 le1 route_through True route_through 2 0 0 False False False False 192.0.3.10 le2 route_through True True true True True True False true False /etc true 1 False True 0 1 true false info RULE %N -- %A lo0 1 True False True 1 False 0 0 False False False False False 0 0 5000 10000 0 0 0 False False 1460 0 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 true true 300 false true true true true false true false true $ # 1 1 true true true true true true /etc true 1 true 0 1 true false info RULE %N -- %A lo0 1 true 1 false 5000 10000 1460 30 10 true true 300 false true true true true false true false true $ # 1 1 true False False 0 False False False False 0 0 0 0 0 False True True 0 False False False False 0 0 0 0 0 False False True True False ICMP net unreachable True False False False False False True True False True /day 0 0 30 1800 False False False debug /second 0 False False True 192.168.1.100 True False False False False 0 0 False False False False False True False False 0 0 5000 0 10000 0 0 0 0 0 False False 1460 1 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 iptables fw_file False False False True False False 0 False False False False 0 0 0 0 0 False True True 0 False False False False 0 0 0 0 0 False False True True False ICMP net unreachable True False False False False False True True False True /day 0 0 30 1800 False False False debug /second 0 False False True 192.168.1.100 True False False False False 0 0 False False False False False True False False 0 0 5000 0 10000 0 0 0 0 0 False False 1460 1 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 iptables fw_file False False False True False False 0 False False False False 0 0 0 0 0 False True True 0 False False False False 0 0 0 0 0 False False True True True ICMP net unreachable True False False False False False True True False True /day 0 0 30 1800 False False False debug /second 0 False False True 192.168.1.100 True False False False False 0 0 False False False False False True False False 0 0 5000 0 10000 0 0 0 0 0 False False 1460 1 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 iptables fw_file False False False True False False 0 False False False False 0 0 0 0 0 False True True 0 False False False False 0 0 0 0 0 False False True True True ICMP net unreachable True False False False False False True True False True /day 0 0 30 1800 False False False debug /second 0 False False True 192.168.1.100 True False False False False 0 0 False False False False False True False False 0 0 5000 0 10000 0 0 0 0 0 False False 1460 1 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 iptables fw_file False False False True True 0 False False False False 0 0 0 0 0 False False False False 0 False False False False 0 0 0 0 0 False True True 0 False False False False 0 0 0 0 0 False False True True True ICMP net unreachable False False False False False False True True False False /day 0 0 30 1800 False False False debug /second 0 False False True 192.168.1.100 True False False False True 0 0 False False False False False True False False 0 0 5000 0 10000 0 0 0 0 0 False False 1460 1 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 iptables fw_file False False False True False False 0 False False False False 0 0 0 0 0 False True True 0 False False False False 0 0 0 0 0 False False True True True ICMP net unreachable True False False False False False True True False False /day 0 0 30 1800 False False False debug /second 0 False False True 192.168.1.100 True False False False True 0 0 False False False False False True False False 0 0 5000 0 10000 0 0 0 0 0 False False 1460 1 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 iptables fw_file False False False True #8BC065 route_through 2 0 0 False False False False False 0 False False False False 0 0 0 0 random 192.0.2.1,192.0.2.2,192.0.2.3 le1 route_through 0 False False #8BC065 route_through 2 0 0 False False False False False 0 False False False False 0 0 0 0 round_robin 192.0.2.1,192.0.2.2,192.0.2.3 le2 route_through 0 False False #8BC065 route_through 2 0 0 False False False False False 0 False False False False 0 0 0 0 round_robin 192.0.2.1,192.0.2.2,192.0.2.3 le2 route_through 0 False False #7694C0 route_through 2 0 0 False False False False False 0 False False False False 0 0 0 0 round_robin 192.0.2.1,192.0.2.2,192.0.2.3 le1 route_through 0 False True #7694C0 route_through 2 0 0 False False False False False 0 False False False False 0 0 0 0 round_robin 192.0.2.1,192.0.2.2,192.0.2.3 le2 route_through 0 False True #7694C0 route_through 2 0 0 False False False False False 0 False False False False 0 0 0 0 round_robin 192.0.2.1,192.0.2.2,192.0.2.3 le2 route_through 0 False True #C0BA44 route_through 2 0 0 False False False False False 0 False False False False 0 0 0 0 random 192.0.2.0/24 le1 route_through 0 False False #C0BA44 route_through 2 0 0 False False False False False 0 False False False False 0 0 0 0 source_hash 192.0.2.0/24 le2 route_through 0 False False #C0BA44 route_through 2 0 0 False False False False False 0 False False False False 0 0 0 0 round_robin 192.0.2.0/255.255.255.0 le2 route_through 0 False False #C86E6E route_through 2 0 0 False False False False False 0 False False False False 0 0 0 0 round_robin 192.0.2.1 le2 route_through 0 False False #C86E6E route_through 2 0 0 False False False False False 0 False False False False 0 0 0 0 round_robin 192.0.2.1/32 le2 route_through 0 False False #C86E6E route_through 2 0 0 False False False False False 0 False False False False 0 0 0 0 round_robin 192.0.300.1/32 le2 route_through 0 False False true True True True False true False /etc true 1 False True 0 1 true false info RULE %N -- %A lo0 1 True False True 1 False 0 0 False False False False False 0 0 5000 10000 0 0 0 False False 1460 0 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 true true 300 false true true true true false true false true $ # 1 1 true False False False False False False False False False False False False True True true False True False False -xt True False False true True False /etc True 1 False True true true true ipv4_first 0 1 True False False False False info RULE %N -- %A False False lo0 1 True False False False 1 False 0 0 False False False False False False False False 0 0 5000 0 10000 0 0 0 0 0 False False 1460 0 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 true true 300 false true true true true false true false true fw_file $ # 1 0 1 1 False False False True route_through 2 0 0 False False False False none route_through False id4847247323126 True True rule3_branch #C0BA44 True True True True True ICMP host prohibited root labfw True False False False False False /etc/fw True True False True /day 0 0 30 1800 False False False debug 0 False False False 10.3.14.40 True False False False 1 False 0 0 False False True False False 0 0 5000 10000 0 0 0 False False 1460 1 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 iptables fw_file False False True True True True True True True ICMP host prohibited root 10.3.14.121 True False False False False False /etc/fw True True 1 False True /day 0 0 30 1800 False False False debug 0 False False False 10.3.14.40 True False False False 1 False 0 0 False False True False False 0 0 5000 10000 0 0 0 False False 1460 1 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 iptables False False True False True rule3_branch #C0BA44 True True True True True ICMP host prohibited root True False False True False False /etc/fw True True False True /day 0 0 30 1800 False False False debug 0 False False False 10.3.14.40 True False False False 1 False 0 0 False False True False False 0 0 5000 10000 0 0 0 False False 1460 1 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 iptables fw_file False False True False True rule3_branch #C0BA44 True True True True True ICMP host prohibited root True False False True False False /etc/fw True True False True /day 0 0 30 1800 False False False debug 0 False False False 10.3.14.42 True False False False 1 False 0 0 False False False False False True False False 0 0 5000 0 10000 0 0 0 0 0 False False 1460 1 False False True False False False False False False False False False False False False False False False False False 0 0 0 0 0 0 30 10 0 0 0 iptables fw_file False False True