298 lines
19 KiB
Plaintext
298 lines
19 KiB
Plaintext
# Warning: table ip nat is managed by iptables-nft, do not touch!
|
|
table ip nat {
|
|
chain DOCKER {
|
|
iifname != "br-c70303d221ee" tcp dport 5680 counter packets 0 bytes 0 xt target "DNAT"
|
|
ip daddr 127.0.0.1 iifname != "br-c70303d221ee" tcp dport 15673 counter packets 0 bytes 0 xt target "DNAT"
|
|
iifname != "br-3636e05760a9" tcp dport 59000 counter packets 0 bytes 0 xt target "DNAT"
|
|
iifname != "br-3636e05760a9" tcp dport 59001 counter packets 0 bytes 0 xt target "DNAT"
|
|
iifname != "br-3636e05760a9" tcp dport 55672 counter packets 0 bytes 0 xt target "DNAT"
|
|
iifname != "br-3636e05760a9" tcp dport 55673 counter packets 0 bytes 0 xt target "DNAT"
|
|
iifname != "br-3636e05760a9" tcp dport 55432 counter packets 0 bytes 0 xt target "DNAT"
|
|
ip daddr 127.0.0.1 iifname != "docker0" tcp dport 57732 counter packets 0 bytes 0 xt target "DNAT"
|
|
ip daddr 127.0.0.1 iifname != "docker0" tcp dport 57733 counter packets 0 bytes 0 xt target "DNAT"
|
|
iifname != "docker0" tcp dport 5314 counter packets 0 bytes 0 xt target "DNAT"
|
|
iifname != "br-613eb68ef5fb" tcp dport 4848 counter packets 0 bytes 0 xt target "DNAT"
|
|
iifname != "br-b3240c822bce" tcp dport 5679 counter packets 0 bytes 0 xt target "DNAT"
|
|
ip daddr 127.0.0.1 iifname != "br-b3240c822bce" tcp dport 15672 counter packets 0 bytes 0 xt target "DNAT"
|
|
iifname != "br-4b504efd6080" tcp dport 9000 counter packets 0 bytes 0 xt target "DNAT"
|
|
iifname != "br-4b504efd6080" tcp dport 9001 counter packets 0 bytes 0 xt target "DNAT"
|
|
ip daddr 127.0.0.1 iifname != "br-ef6df03f71a0" tcp dport 5432 counter packets 0 bytes 0 xt target "DNAT"
|
|
ip daddr 127.0.0.1 iifname != "br-ef6df03f71a0" tcp dport 8081 counter packets 0 bytes 0 xt target "DNAT"
|
|
ip daddr 127.0.0.1 iifname != "br-ec480f77ac34" tcp dport 6379 counter packets 0 bytes 0 xt target "DNAT"
|
|
ip daddr 127.0.0.1 iifname != "br-af4c9c2aa60a" tcp dport 8001 counter packets 0 bytes 0 xt target "DNAT"
|
|
ip daddr 127.0.0.1 iifname != "br-669fda75f1ac" tcp dport 28080 counter packets 0 bytes 0 xt target "DNAT"
|
|
ip daddr 127.0.0.1 iifname != "br-af4c9c2aa60a" tcp dport 6789 counter packets 0 bytes 0 xt target "DNAT"
|
|
iifname != "br-af4c9c2aa60a" tcp dport 8770 counter packets 0 bytes 0 xt target "DNAT"
|
|
iifname != "br-af4c9c2aa60a" tcp dport 1212 counter packets 0 bytes 0 xt target "DNAT"
|
|
iifname != "br-af4c9c2aa60a" tcp dport 80 counter packets 0 bytes 0 xt target "DNAT"
|
|
iifname != "br-af4c9c2aa60a" tcp dport 443 counter packets 0 bytes 0 xt target "DNAT"
|
|
ip daddr 127.0.0.1 iifname != "docker0" tcp dport 55541 counter packets 0 bytes 0 xt target "DNAT"
|
|
}
|
|
|
|
chain PREROUTING {
|
|
type nat hook prerouting priority dstnat; policy accept;
|
|
xt match "addrtype" counter packets 437947 bytes 71410534 jump DOCKER
|
|
}
|
|
|
|
chain OUTPUT {
|
|
type nat hook output priority dstnat; policy accept;
|
|
ip daddr != 127.0.0.0/8 xt match "addrtype" counter packets 5761 bytes 423317 jump DOCKER
|
|
}
|
|
|
|
chain POSTROUTING {
|
|
type nat hook postrouting priority srcnat; policy accept;
|
|
ip saddr 172.22.0.0/16 oifname != "br-65f6dc782562" counter packets 124 bytes 16328 xt target "MASQUERADE"
|
|
ip saddr 172.28.0.0/16 oifname != "br-669fda75f1ac" counter packets 127 bytes 16928 xt target "MASQUERADE"
|
|
ip saddr 172.31.0.0/16 oifname != "br-ec480f77ac34" counter packets 127 bytes 16928 xt target "MASQUERADE"
|
|
ip saddr 192.168.48.0/20 oifname != "br-ef6df03f71a0" counter packets 127 bytes 16928 xt target "MASQUERADE"
|
|
ip saddr 172.25.0.0/16 oifname != "br-4b504efd6080" counter packets 129 bytes 17052 xt target "MASQUERADE"
|
|
ip saddr 192.168.32.0/20 oifname != "br-613eb68ef5fb" counter packets 1124 bytes 76748 xt target "MASQUERADE"
|
|
ip saddr 172.17.0.0/16 oifname != "docker0" counter packets 1833 bytes 150990 xt target "MASQUERADE"
|
|
ip saddr 172.18.0.0/16 oifname != "br-07a5e2f2c42f" counter packets 504 bytes 65112 xt target "MASQUERADE"
|
|
ip saddr 172.27.0.0/16 oifname != "br-160f55da427c" counter packets 508 bytes 65784 xt target "MASQUERADE"
|
|
ip saddr 192.168.16.0/20 oifname != "br-dba077b9b543" counter packets 503 bytes 64784 xt target "MASQUERADE"
|
|
ip saddr 192.168.64.0/20 oifname != "br-d44fef8fd602" counter packets 1282 bytes 111308 xt target "MASQUERADE"
|
|
ip saddr 172.30.0.0/16 oifname != "br-af4c9c2aa60a" counter packets 2503 bytes 190324 xt target "MASQUERADE"
|
|
ip saddr 172.21.0.0/16 oifname != "br-9d6c95e8d80c" counter packets 1289 bytes 112644 xt target "MASQUERADE"
|
|
ip saddr 172.23.0.0/16 oifname != "br-679db9b21e00" counter packets 506 bytes 65384 xt target "MASQUERADE"
|
|
ip saddr 172.24.0.0/16 oifname != "br-40094534a5ee" counter packets 508 bytes 65784 xt target "MASQUERADE"
|
|
ip saddr 172.26.0.0/16 oifname != "br-3dcb6ef83ea1" counter packets 508 bytes 65784 xt target "MASQUERADE"
|
|
ip saddr 172.20.0.0/16 oifname != "br-3a760a74f4f6" counter packets 1153 bytes 104344 xt target "MASQUERADE"
|
|
ip saddr 192.168.80.0/20 oifname != "br-3636e05760a9" counter packets 546 bytes 70540 xt target "MASQUERADE"
|
|
ip saddr 172.29.0.0/16 oifname != "br-b3240c822bce" counter packets 551 bytes 71492 xt target "MASQUERADE"
|
|
ip saddr 172.19.0.0/16 oifname != "br-c70303d221ee" counter packets 1136 bytes 106592 xt target "MASQUERADE"
|
|
}
|
|
}
|
|
# Warning: table ip filter is managed by iptables-nft, do not touch!
|
|
table ip filter {
|
|
chain DOCKER {
|
|
ip daddr 172.17.0.5 iifname != "docker0" oifname "docker0" tcp dport 5432 counter packets 0 bytes 0 accept
|
|
ip daddr 172.30.0.2 iifname != "br-af4c9c2aa60a" oifname "br-af4c9c2aa60a" tcp dport 443 counter packets 0 bytes 0 accept
|
|
ip daddr 172.30.0.2 iifname != "br-af4c9c2aa60a" oifname "br-af4c9c2aa60a" tcp dport 80 counter packets 0 bytes 0 accept
|
|
ip daddr 172.30.0.10 iifname != "br-af4c9c2aa60a" oifname "br-af4c9c2aa60a" tcp dport 3000 counter packets 0 bytes 0 accept
|
|
ip daddr 172.30.0.5 iifname != "br-af4c9c2aa60a" oifname "br-af4c9c2aa60a" tcp dport 8000 counter packets 0 bytes 0 accept
|
|
ip daddr 172.30.0.3 iifname != "br-af4c9c2aa60a" oifname "br-af4c9c2aa60a" tcp dport 6789 counter packets 0 bytes 0 accept
|
|
ip daddr 172.28.0.3 iifname != "br-669fda75f1ac" oifname "br-669fda75f1ac" tcp dport 8080 counter packets 0 bytes 0 accept
|
|
ip daddr 172.30.0.4 iifname != "br-af4c9c2aa60a" oifname "br-af4c9c2aa60a" tcp dport 5540 counter packets 0 bytes 0 accept
|
|
ip daddr 172.31.0.2 iifname != "br-ec480f77ac34" oifname "br-ec480f77ac34" tcp dport 6379 counter packets 0 bytes 0 accept
|
|
ip daddr 192.168.48.3 iifname != "br-ef6df03f71a0" oifname "br-ef6df03f71a0" tcp dport 8081 counter packets 0 bytes 0 accept
|
|
ip daddr 192.168.48.2 iifname != "br-ef6df03f71a0" oifname "br-ef6df03f71a0" tcp dport 5432 counter packets 0 bytes 0 accept
|
|
ip daddr 172.25.0.2 iifname != "br-4b504efd6080" oifname "br-4b504efd6080" tcp dport 9001 counter packets 0 bytes 0 accept
|
|
ip daddr 172.25.0.2 iifname != "br-4b504efd6080" oifname "br-4b504efd6080" tcp dport 9000 counter packets 0 bytes 0 accept
|
|
ip daddr 172.29.0.2 iifname != "br-b3240c822bce" oifname "br-b3240c822bce" tcp dport 15672 counter packets 0 bytes 0 accept
|
|
ip daddr 172.29.0.2 iifname != "br-b3240c822bce" oifname "br-b3240c822bce" tcp dport 5672 counter packets 0 bytes 0 accept
|
|
ip daddr 192.168.32.2 iifname != "br-613eb68ef5fb" oifname "br-613eb68ef5fb" tcp dport 1433 counter packets 0 bytes 0 accept
|
|
ip daddr 172.17.0.3 iifname != "docker0" oifname "docker0" tcp dport 5000 counter packets 0 bytes 0 accept
|
|
ip daddr 172.17.0.2 iifname != "docker0" oifname "docker0" tcp dport 15672 counter packets 0 bytes 0 accept
|
|
ip daddr 172.17.0.2 iifname != "docker0" oifname "docker0" tcp dport 5672 counter packets 0 bytes 0 accept
|
|
ip daddr 192.168.80.4 iifname != "br-3636e05760a9" oifname "br-3636e05760a9" tcp dport 5432 counter packets 0 bytes 0 accept
|
|
ip daddr 192.168.80.3 iifname != "br-3636e05760a9" oifname "br-3636e05760a9" tcp dport 15672 counter packets 0 bytes 0 accept
|
|
ip daddr 192.168.80.3 iifname != "br-3636e05760a9" oifname "br-3636e05760a9" tcp dport 5672 counter packets 0 bytes 0 accept
|
|
ip daddr 192.168.80.2 iifname != "br-3636e05760a9" oifname "br-3636e05760a9" tcp dport 9001 counter packets 0 bytes 0 accept
|
|
ip daddr 192.168.80.2 iifname != "br-3636e05760a9" oifname "br-3636e05760a9" tcp dport 9000 counter packets 0 bytes 0 accept
|
|
ip daddr 172.19.0.2 iifname != "br-c70303d221ee" oifname "br-c70303d221ee" tcp dport 15672 counter packets 0 bytes 0 accept
|
|
ip daddr 172.19.0.2 iifname != "br-c70303d221ee" oifname "br-c70303d221ee" tcp dport 5672 counter packets 0 bytes 0 accept
|
|
iifname != "br-c70303d221ee" oifname "br-c70303d221ee" counter packets 0 bytes 0 drop
|
|
iifname != "br-b3240c822bce" oifname "br-b3240c822bce" counter packets 0 bytes 0 drop
|
|
iifname != "br-3636e05760a9" oifname "br-3636e05760a9" counter packets 0 bytes 0 drop
|
|
iifname != "br-3a760a74f4f6" oifname "br-3a760a74f4f6" counter packets 0 bytes 0 drop
|
|
iifname != "br-3dcb6ef83ea1" oifname "br-3dcb6ef83ea1" counter packets 0 bytes 0 drop
|
|
iifname != "br-40094534a5ee" oifname "br-40094534a5ee" counter packets 0 bytes 0 drop
|
|
iifname != "br-679db9b21e00" oifname "br-679db9b21e00" counter packets 0 bytes 0 drop
|
|
iifname != "br-9d6c95e8d80c" oifname "br-9d6c95e8d80c" counter packets 0 bytes 0 drop
|
|
iifname != "br-af4c9c2aa60a" oifname "br-af4c9c2aa60a" counter packets 0 bytes 0 drop
|
|
iifname != "br-d44fef8fd602" oifname "br-d44fef8fd602" counter packets 0 bytes 0 drop
|
|
iifname != "br-dba077b9b543" oifname "br-dba077b9b543" counter packets 0 bytes 0 drop
|
|
iifname != "br-160f55da427c" oifname "br-160f55da427c" counter packets 0 bytes 0 drop
|
|
iifname != "br-07a5e2f2c42f" oifname "br-07a5e2f2c42f" counter packets 0 bytes 0 drop
|
|
iifname != "docker0" oifname "docker0" counter packets 0 bytes 0 drop
|
|
iifname != "br-613eb68ef5fb" oifname "br-613eb68ef5fb" counter packets 0 bytes 0 drop
|
|
iifname != "br-4b504efd6080" oifname "br-4b504efd6080" counter packets 0 bytes 0 drop
|
|
iifname != "br-ef6df03f71a0" oifname "br-ef6df03f71a0" counter packets 0 bytes 0 drop
|
|
iifname != "br-ec480f77ac34" oifname "br-ec480f77ac34" counter packets 0 bytes 0 drop
|
|
iifname != "br-669fda75f1ac" oifname "br-669fda75f1ac" counter packets 0 bytes 0 drop
|
|
iifname != "br-65f6dc782562" oifname "br-65f6dc782562" counter packets 0 bytes 0 drop
|
|
}
|
|
|
|
chain DOCKER-FORWARD {
|
|
counter packets 6530319 bytes 11196484299 jump DOCKER-CT
|
|
counter packets 3312487 bytes 5001091084 jump DOCKER-INTERNAL
|
|
counter packets 3312487 bytes 5001091084 jump DOCKER-BRIDGE
|
|
iifname "br-c70303d221ee" counter packets 0 bytes 0 accept
|
|
iifname "br-b3240c822bce" counter packets 0 bytes 0 accept
|
|
iifname "br-3636e05760a9" counter packets 43 bytes 9355 accept
|
|
iifname "br-3a760a74f4f6" counter packets 0 bytes 0 accept
|
|
iifname "br-3dcb6ef83ea1" counter packets 0 bytes 0 accept
|
|
iifname "br-40094534a5ee" counter packets 0 bytes 0 accept
|
|
iifname "br-679db9b21e00" counter packets 0 bytes 0 accept
|
|
iifname "br-9d6c95e8d80c" counter packets 0 bytes 0 accept
|
|
iifname "br-af4c9c2aa60a" counter packets 2761311 bytes 4959915711 accept
|
|
iifname "br-d44fef8fd602" counter packets 0 bytes 0 accept
|
|
iifname "br-dba077b9b543" counter packets 0 bytes 0 accept
|
|
iifname "br-160f55da427c" counter packets 0 bytes 0 accept
|
|
iifname "br-07a5e2f2c42f" counter packets 0 bytes 0 accept
|
|
iifname "docker0" counter packets 460394 bytes 25754554 accept
|
|
iifname "br-613eb68ef5fb" counter packets 10805 bytes 1792862 accept
|
|
iifname "br-4b504efd6080" counter packets 33 bytes 2892 accept
|
|
iifname "br-ef6df03f71a0" counter packets 0 bytes 0 accept
|
|
iifname "br-ec480f77ac34" counter packets 0 bytes 0 accept
|
|
iifname "br-669fda75f1ac" counter packets 0 bytes 0 accept
|
|
iifname "br-65f6dc782562" counter packets 0 bytes 0 accept
|
|
}
|
|
|
|
chain DOCKER-BRIDGE {
|
|
oifname "br-c70303d221ee" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-b3240c822bce" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-3636e05760a9" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-3a760a74f4f6" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-3dcb6ef83ea1" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-40094534a5ee" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-679db9b21e00" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-9d6c95e8d80c" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-af4c9c2aa60a" counter packets 118 bytes 8400 jump DOCKER
|
|
oifname "br-d44fef8fd602" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-dba077b9b543" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-160f55da427c" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-07a5e2f2c42f" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "docker0" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-613eb68ef5fb" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-4b504efd6080" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-ef6df03f71a0" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-ec480f77ac34" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-669fda75f1ac" counter packets 0 bytes 0 jump DOCKER
|
|
oifname "br-65f6dc782562" counter packets 0 bytes 0 jump DOCKER
|
|
}
|
|
|
|
chain DOCKER-CT {
|
|
oifname "br-c70303d221ee" xt match "conntrack" counter packets 0 bytes 0 accept
|
|
oifname "br-b3240c822bce" xt match "conntrack" counter packets 0 bytes 0 accept
|
|
oifname "br-3636e05760a9" xt match "conntrack" counter packets 35 bytes 23113 accept
|
|
oifname "br-3a760a74f4f6" xt match "conntrack" counter packets 0 bytes 0 accept
|
|
oifname "br-3dcb6ef83ea1" xt match "conntrack" counter packets 0 bytes 0 accept
|
|
oifname "br-40094534a5ee" xt match "conntrack" counter packets 0 bytes 0 accept
|
|
oifname "br-679db9b21e00" xt match "conntrack" counter packets 0 bytes 0 accept
|
|
oifname "br-9d6c95e8d80c" xt match "conntrack" counter packets 0 bytes 0 accept
|
|
oifname "br-af4c9c2aa60a" xt match "conntrack" counter packets 2488066 bytes 1053784742 accept
|
|
oifname "br-d44fef8fd602" xt match "conntrack" counter packets 0 bytes 0 accept
|
|
oifname "br-dba077b9b543" xt match "conntrack" counter packets 0 bytes 0 accept
|
|
oifname "br-160f55da427c" xt match "conntrack" counter packets 0 bytes 0 accept
|
|
oifname "br-07a5e2f2c42f" xt match "conntrack" counter packets 0 bytes 0 accept
|
|
oifname "docker0" xt match "conntrack" counter packets 666252 bytes 5079577802 accept
|
|
oifname "br-613eb68ef5fb" xt match "conntrack" counter packets 7926 bytes 7636543 accept
|
|
oifname "br-4b504efd6080" xt match "conntrack" counter packets 29 bytes 10870 accept
|
|
oifname "br-ef6df03f71a0" xt match "conntrack" counter packets 0 bytes 0 accept
|
|
oifname "br-ec480f77ac34" xt match "conntrack" counter packets 0 bytes 0 accept
|
|
oifname "br-669fda75f1ac" xt match "conntrack" counter packets 0 bytes 0 accept
|
|
oifname "br-65f6dc782562" xt match "conntrack" counter packets 0 bytes 0 accept
|
|
}
|
|
|
|
chain DOCKER-INTERNAL {
|
|
}
|
|
|
|
chain FORWARD {
|
|
type filter hook forward priority filter; policy drop;
|
|
counter packets 33747166 bytes 176750349038 jump DOCKER-USER
|
|
counter packets 6530319 bytes 11196484299 jump DOCKER-FORWARD
|
|
}
|
|
|
|
chain DOCKER-USER {
|
|
oifname "mlab*" counter packets 15657582 bytes 162801189460 accept
|
|
iifname "mlab*" counter packets 10958315 bytes 687322055 accept
|
|
oifname "incusbr0" counter packets 388768 bytes 2053271282 accept
|
|
iifname "incusbr0" counter packets 212182 bytes 12081942 accept
|
|
}
|
|
}
|
|
# Warning: table ip6 nat is managed by iptables-nft, do not touch!
|
|
table ip6 nat {
|
|
chain DOCKER {
|
|
}
|
|
|
|
chain PREROUTING {
|
|
type nat hook prerouting priority dstnat; policy accept;
|
|
xt match "addrtype" counter packets 532 bytes 113834 jump DOCKER
|
|
}
|
|
|
|
chain OUTPUT {
|
|
type nat hook output priority dstnat; policy accept;
|
|
ip6 daddr != ::1 xt match "addrtype" counter packets 0 bytes 0 jump DOCKER
|
|
}
|
|
}
|
|
table ip6 filter {
|
|
chain DOCKER {
|
|
}
|
|
|
|
chain DOCKER-FORWARD {
|
|
counter packets 0 bytes 0 jump DOCKER-CT
|
|
counter packets 0 bytes 0 jump DOCKER-INTERNAL
|
|
counter packets 0 bytes 0 jump DOCKER-BRIDGE
|
|
}
|
|
|
|
chain DOCKER-BRIDGE {
|
|
}
|
|
|
|
chain DOCKER-CT {
|
|
}
|
|
|
|
chain DOCKER-INTERNAL {
|
|
}
|
|
|
|
chain FORWARD {
|
|
type filter hook forward priority filter; policy accept;
|
|
counter packets 0 bytes 0 jump DOCKER-USER
|
|
counter packets 0 bytes 0 jump DOCKER-FORWARD
|
|
}
|
|
|
|
chain DOCKER-USER {
|
|
}
|
|
}
|
|
table ip raw {
|
|
chain PREROUTING {
|
|
type filter hook prerouting priority raw; policy accept;
|
|
ip daddr 172.19.0.2 iifname != "br-c70303d221ee" counter packets 0 bytes 0 drop
|
|
ip daddr 192.168.80.2 iifname != "br-3636e05760a9" counter packets 0 bytes 0 drop
|
|
ip daddr 192.168.80.3 iifname != "br-3636e05760a9" counter packets 0 bytes 0 drop
|
|
ip daddr 127.0.0.1 iifname != "lo" tcp dport 15673 counter packets 0 bytes 0 drop
|
|
ip daddr 192.168.80.4 iifname != "br-3636e05760a9" counter packets 0 bytes 0 drop
|
|
ip daddr 172.17.0.2 iifname != "docker0" counter packets 0 bytes 0 drop
|
|
ip daddr 127.0.0.1 iifname != "lo" tcp dport 57732 counter packets 0 bytes 0 drop
|
|
ip daddr 127.0.0.1 iifname != "lo" tcp dport 57733 counter packets 0 bytes 0 drop
|
|
ip daddr 172.17.0.3 iifname != "docker0" counter packets 0 bytes 0 drop
|
|
ip daddr 172.17.0.4 iifname != "docker0" counter packets 0 bytes 0 drop
|
|
ip daddr 192.168.32.2 iifname != "br-613eb68ef5fb" counter packets 0 bytes 0 drop
|
|
ip daddr 172.30.0.7 iifname != "br-af4c9c2aa60a" counter packets 0 bytes 0 drop
|
|
ip daddr 172.29.0.2 iifname != "br-b3240c822bce" counter packets 0 bytes 0 drop
|
|
ip daddr 127.0.0.1 iifname != "lo" tcp dport 15672 counter packets 0 bytes 0 drop
|
|
ip daddr 172.25.0.2 iifname != "br-4b504efd6080" counter packets 0 bytes 0 drop
|
|
ip daddr 172.30.0.9 iifname != "br-af4c9c2aa60a" counter packets 0 bytes 0 drop
|
|
ip daddr 192.168.48.2 iifname != "br-ef6df03f71a0" counter packets 0 bytes 0 drop
|
|
ip daddr 127.0.0.1 iifname != "lo" tcp dport 5432 counter packets 0 bytes 0 drop
|
|
ip daddr 192.168.48.3 iifname != "br-ef6df03f71a0" counter packets 0 bytes 0 drop
|
|
ip daddr 127.0.0.1 iifname != "lo" tcp dport 8081 counter packets 0 bytes 0 drop
|
|
ip daddr 172.30.0.8 iifname != "br-af4c9c2aa60a" counter packets 0 bytes 0 drop
|
|
ip daddr 172.31.0.2 iifname != "br-ec480f77ac34" counter packets 0 bytes 0 drop
|
|
ip daddr 127.0.0.1 iifname != "lo" tcp dport 6379 counter packets 0 bytes 0 drop
|
|
ip daddr 172.30.0.4 iifname != "br-af4c9c2aa60a" counter packets 0 bytes 0 drop
|
|
ip daddr 127.0.0.1 iifname != "lo" tcp dport 8001 counter packets 0 bytes 0 drop
|
|
ip daddr 172.31.0.3 iifname != "br-ec480f77ac34" counter packets 0 bytes 0 drop
|
|
ip daddr 172.28.0.2 iifname != "br-669fda75f1ac" counter packets 0 bytes 0 drop
|
|
ip daddr 172.30.0.6 iifname != "br-af4c9c2aa60a" counter packets 0 bytes 0 drop
|
|
ip daddr 172.28.0.3 iifname != "br-669fda75f1ac" counter packets 0 bytes 0 drop
|
|
ip daddr 127.0.0.1 iifname != "lo" tcp dport 28080 counter packets 0 bytes 0 drop
|
|
ip daddr 172.30.0.3 iifname != "br-af4c9c2aa60a" counter packets 0 bytes 0 drop
|
|
ip daddr 127.0.0.1 iifname != "lo" tcp dport 6789 counter packets 0 bytes 0 drop
|
|
ip daddr 172.30.0.5 iifname != "br-af4c9c2aa60a" counter packets 0 bytes 0 drop
|
|
ip daddr 172.22.0.2 iifname != "br-65f6dc782562" counter packets 0 bytes 0 drop
|
|
ip daddr 172.30.0.10 iifname != "br-af4c9c2aa60a" counter packets 0 bytes 0 drop
|
|
ip daddr 172.22.0.3 iifname != "br-65f6dc782562" counter packets 0 bytes 0 drop
|
|
ip daddr 172.30.0.2 iifname != "br-af4c9c2aa60a" counter packets 0 bytes 0 drop
|
|
ip daddr 172.17.0.5 iifname != "docker0" counter packets 0 bytes 0 drop
|
|
ip daddr 127.0.0.1 iifname != "lo" tcp dport 55541 counter packets 0 bytes 0 drop
|
|
}
|
|
}
|
|
table ip mangle {
|
|
chain FORWARD {
|
|
type filter hook forward priority mangle; policy accept;
|
|
tcp flags & (syn | rst) == syn counter packets 13760 bytes 825476 xt target "TCPMSS"
|
|
}
|
|
}
|