./bin/cli:24585:ip6tables -F
./bin/cli:25189:ebtables -F
./bin/cli:25245:iptables -t nat -I PREROUTING -i in_0 -s 172.10.10.1 -d 172.10.10.10 -p udp --dport 20253 -j DNAT --to 192.168.2.100
./bin/cli:25249:iptables -t nat -I PREROUTING -i in_0 -s 172.10.10.1 -d 172.10.10.10 -p udp --dport 20248 -j DNAT --to 192.168.2.100
./bin/cli:25253:iptables -t nat -I PREROUTING -i in_0 -s 172.10.10.1 -d 172.10.10.10 -p udp --dport 20249 -j DNAT --to 192.168.2.100
./bin/cli:25257:iptables -t nat -D PREROUTING -i in_0 -s 172.10.10.1 -d 172.10.10.10 -p udp --dport 20253 -j DNAT --to 192.168.2.100
./bin/cli:25261:iptables -t nat -D PREROUTING -i in_0 -s 172.10.10.1 -d 172.10.10.10 -p udp --dport 20248 -j DNAT --to 192.168.2.100
./bin/cli:25265:iptables -t nat -D PREROUTING -i in_0 -s 172.10.10.1 -d 172.10.10.10 -p udp --dport 20249 -j DNAT --to 192.168.2.100
./bin/cli:25871:ip6tables -L -v
./bin/cli:26106:ebtables -D FWD_PPPOE -j DROP
./bin/cms:206171:iptables -t mangle %s %s %s %s  -d %s -p tcp --dport %u -j DSCP --set-dscp 0x%x
./bin/cms:206176:ebtables -t filter %s %s  -j mark --set-mark 0x%x -p 0x0800 --ip-proto 6  --ip-dst %s --ip-dport %u
./bin/cms:208445:ip6tables -A INPUT_SERVICE -i %s -p tcp --dport 21 -j ACCEPT 2>/dev/null
./bin/cms:208449:ip6tables -D INPUT_SERVICE -i ppp256 -p tcp --dport 21 -j ACCEPT 2>/dev/null
./bin/cms:208453:ip6tables -D INPUT_SERVICE -i %s -p tcp --dport 21 -j ACCEPT 2>/dev/null
./bin/cms:208457:iptables -A INPUT_SERVICE -i %s -p tcp --dport 21 -j ACCEPT 2>/dev/null
./bin/cms:208458:iptables -D INPUT_SERVICE -i ppp256 -p tcp --dport 21 -j ACCEPT 2>/dev/null
./bin/cms:208459:iptables -D INPUT_SERVICE -i %s -p tcp --dport 21 -j ACCEPT 2>/dev/null
./bin/cms:208632:iptables -A INPUT_SERVICE -i %s -p tcp --dport %d -j ACCEPT 2>/dev/null
./bin/cms:208633:iptables -D INPUT_SERVICE -i ppp256 -p tcp --dport %d -j ACCEPT 2>/dev/null
./bin/cms:208634:iptables -D INPUT_SERVICE -i %s -p tcp --dport %d -j ACCEPT 2>/dev/null
./bin/cms:209238:iptables -A INPUT_SERVICE -p tcp --dport %d -i ! br+ -j ACCEPT 2>/dev/null
./bin/cms:209240:iptables -t nat -A PRE_SERVICE -p tcp --dport %d -i ! br+ -j ACCEPT 2>/dev/null
./bin/cms:209241:iptables -D INPUT_SERVICE -p tcp --dport %d -i ! br+ -j ACCEPT 2>/dev/null
./bin/cms:209243:iptables -t nat -D PRE_SERVICE -p tcp --dport %d -i ! br+ -j ACCEPT 2>/dev/null
./bin/cms:209408:iptables -t nat -F PRE_FTP
./bin/cms:209410:iptables -t filter -F INPUT_FTP
./bin/cms:209411:ip6tables -t filter -F INPUT_FTP
./bin/cms:210114:iptables -t mangle -I ROUTE_CTL_LIST -d %s/%d -j RETURN 2>/dev/null
./bin/cms:210147:iptables -t nat -D POSTROUTING -s %s/%s -o %s -j MASQUERADE --mode fullcone
./bin/cms:210148:iptables -t nat -I POSTROUTING -s %s/%s -o %s -j MASQUERADE --mode fullcone
./bin/cms:210149:iptables -I FORWARD -d %s -j ACCEPT
./bin/cms:210481:iptables -t mangle %s  OUTPUT  -d %s  -p icmp  -j DSCP --set-dscp 0x%x
./bin/cms:210483:iptables -t mangle %s  OUTPUT -o %s  -d %s -p icmp -j DSCP --set-dscp 0x%x
./bin/cms:210624:ebtables -t broute %s BRIDGINGFILTER 
./bin/cms:210633:ebtables -t broute %s BRIDGINGFILTER -i %s -j CONTINUE
./bin/cms:210648:ebtables -t broute %s BRIDGINGFILTER -j DROP
./bin/cms:210652:ebtables -t broute -D BRIDGINGFILTER 1
./bin/cms:210658:ebtables -t broute -N BRIDGINGFILTER
./bin/cms:210662:ebtables -t broute -I BROUTING 1 -j BRIDGINGFILTER
./bin/cms:210811:ip6tables -t mangle  -D PRE_LAN_SUBNET -i br0  -s %s -j ACCEPT
./bin/cms:210813:ip6tables -F FORWARD_PREFIX
./bin/cms:210817:ip6tables -t mangle  -A PRE_LAN_SUBNET -i br0  -s %s -j ACCEPT
./bin/cms:210819:ip6tables -A FORWARD_PREFIX -i br0 %s %s -j REJECT --reject-with icmp6-dst-unreachable
./bin/cms:211521:iptables -t mangle -F ROUTE_OPTION121_LIST
./bin/cms:211593: iptables -D FORWARD -i br0 -o %s -j DROP 2>/dev/null
./bin/cms:211596: iptables -I FORWARD -i br0 -o %s -j DROP 2>/dev/null
./bin/cms:212094:iptables -D FWD_LAN_SUBNET -i br0 -o %s -d 192.168.0.0/16 -j DROP 2>/dev/null
./bin/cms:212097:iptables -D FWD_LAN_SUBNET -i br0 -o %s -d 172.16.0.0/12 -j DROP 2>/dev/null
./bin/cms:212101:iptables -D FWD_LAN_SUBNET -i br0 -o %s -d 10.0.0.0/8 -j DROP 2>/dev/null
./bin/cms:212106:iptables -D INPUT_SERVICE -i %s -p %s --dport %d:%d -j ACCEPT 2>/dev/null
./bin/cms:212109:iptables -t nat -D PREROUTING -i %s -p %s --dport %d:%d -j ACCEPT 2>/dev/null
./bin/cms:212112:iptables -A INPUT_SERVICE -i %s -p %s --dport %d:%d -j ACCEPT 2>/dev/null
./bin/cms:212115:iptables -t nat -I PREROUTING 1 -i %s -p %s --dport %d:%d -j ACCEPT 2>/dev/null
./bin/cms:212116:iptables -D INPUT_SERVICE -i %s -p %s --dport %d -j ACCEPT 2>/dev/null
./bin/cms:212118:iptables -t nat -D PREROUTING -i %s -p %s --dport %d -j ACCEPT 2>/dev/null
./bin/cms:212120:iptables -A INPUT_SERVICE -i %s -p %s --dport %d -j ACCEPT 2>/dev/null
./bin/cms:212122:iptables -t nat -I PREROUTING 1 -i %s -p %s --dport %d -j ACCEPT 2>/dev/null
./bin/cms:212126:iptables -D FWD_FIREWALL -o %s -j DROP 2>/dev/null
./bin/cms:212128:iptables -D OUTPUT -p igmp -o %s -j DROP 2>/dev/null
./bin/cms:212132:iptables -D OUTPUT -p udp --sport 56005 -o %s -j DROP 2>/dev/null
./bin/cms:212135:ip6tables -D FORWARD -o %s -j DROP 2>/dev/null
./bin/cms:212137:iptables -I INPUT -p %d -d 255.255.255.255 -j DROP
./bin/cms:212143:iptables -A INPUT_LAN_SUBNET %s br0 -s %s/%s -j DROP 2>/dev/null
./bin/cms:212149:iptables -A FWD_LAN_SUBNET %s br0 -s %s/%s -j DROP 2>/dev/null
./bin/cms:212151:iptables -A FWD_LAN_SUBNET -i br0 %s %s/%s -j DROP 2>/dev/null
./bin/cms:212153:iptables -A FWD_LAN_SUBNET -i br0 -o %s -j DROP 2>/dev/null
./bin/cms:212154:iptables -t nat -A PRE_LAN_SUBNET -i br0 -m ttl --ttl 0 %s %s/%s -j DROP 2>/dev/null
./bin/cms:212158:iptables -t nat -A PRE_LAN_SUBNET -i br0 -m ttl --ttl 1 %s %s/%s -j DROP 2>/dev/null
./bin/cms:212162:iptables -t mangle -A PREROUTING -i br0 -m ttl --ttl 0 %s %s/%s -j DROP 2>/dev/null
./bin/cms:212163:iptables -t mangle -A PREROUTING -i br0 -m ttl --ttl 1 %s %s/%s -j DROP 2>/dev/null
./bin/cms:212164:ebtables -A INPUT_DEFAULT -p IPv4 --ip-proto igmp --ip-src ! %s/%s  -j DROP 2>/dev/null
./bin/cms:212165:iptables -I INPUT_FIREWALL -i br0 -p tcp %s %s -j DROP 2>/dev/null
./bin/cms:212169:iptables -I INPUT_FIREWALL -i br0 -p udp --dport 53 %s %s -j DROP 2>/dev/null
./bin/cms:212172:iptables -I INPUT_FIREWALL -i br0 -p icmp %s %s -j DROP 2>/dev/null
./bin/cms:212177:ip6tables -I FORWARD -o %s -j DROP 2>/dev/null
./bin/cms:212179:ip6tables -t filter -D FORWARD -i br0 -m mark --mark 0x00000010/0x00000010 -j REJECT --reject-with icmp6-dst-unreachable 2>/dev/null
./bin/cms:212183:ip6tables -t filter -I FORWARD 1 -i br0 -m mark --mark 0x00000010/0x00000010 -j REJECT --reject-with icmp6-dst-unreachable 2>/dev/null
./bin/cms:212194:iptables -%c INPUT_SERVICE -i %s -p tcp --dport %d -j ACCEPT 2>/dev/null
./bin/cms:212198:iptables -%c FWD_SERVICE -i %s -p tcp --dport %d -j ACCEPT 2>/dev/null
./bin/cms:212200:iptables -%c INPUT_SERVICE -i %s -p udp --dport %d -j ACCEPT 2>/dev/null
./bin/cms:212204:iptables -%c FWD_SERVICE -i %s -p udp --dport %d -j ACCEPT 2>/dev/null
./bin/cms:212235:iptables -A FWD_LAN_SUBNET -i br0 -o %s -d 192.168.0.0/16 -j DROP 2>/dev/null
./bin/cms:212238:iptables -A FWD_LAN_SUBNET -i br0 -o %s -d 172.16.0.0/12 -j DROP 2>/dev/null
./bin/cms:212242:iptables -A FWD_LAN_SUBNET -i br0 -o %s -d 10.0.0.0/8 -j DROP 2>/dev/null
./bin/cms:212277:iptables -t mangle -D PREROUTING -p tcp --tcp-flags SYN,ACK,RST SYN -m tcpmss --mss %d: -i %s -j TCPMSS --set-mss %d
./bin/cms:212281:iptables -t mangle -D POSTROUTING -p tcp --tcp-flags SYN,ACK,RST SYN -m tcpmss --mss %d: -o %s -j TCPMSS --set-mss %d
./bin/cms:212284:iptables -t mangle -D PREROUTING -p tcp --tcp-flags SYN,ACK,RST SYN,ACK -m tcpmss --mss %d: -i %s -j TCPMSS --set-mss %d
./bin/cms:212288:iptables -t mangle -D POSTROUTING -p tcp --tcp-flags SYN,ACK,RST SYN,ACK -m tcpmss --mss %d: -o %s -j TCPMSS --set-mss %d
./bin/cms:212306:iptables -D INPUT_SERVICE -i %s -p udp --dport 67:68 -j ACCEPT 2>/dev/null
./bin/cms:212308:iptables -D FWD_SERVICE -i br0 -o %s -d 239.0.0.0/8 -j DROP 2>/dev/null
./bin/cms:212323:iptables -A FWD_FIREWALL -o %s -j DROP 2>/dev/null
./bin/cms:212325:iptables -A OUTPUT -p igmp -o %s -j DROP 2>/dev/null
./bin/cms:212329:iptables -A OUTPUT -p udp --sport 56005 -o %s -j DROP 2>/dev/null
./bin/cms:212332:iptables -t mangle -A PREROUTING -p tcp --tcp-flags SYN,ACK,RST SYN -m tcpmss --mss %d: -i %s -j TCPMSS --set-mss %d
./bin/cms:212336:iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,ACK,RST SYN -m tcpmss --mss %d: -o %s -j TCPMSS --set-mss %d
./bin/cms:212339:iptables -t mangle -A PREROUTING -p tcp --tcp-flags SYN,ACK,RST SYN,ACK -m tcpmss --mss %d: -i %s -j TCPMSS --set-mss %d
./bin/cms:212343:iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,ACK,RST SYN,ACK -m tcpmss --mss %d: -o %s -j TCPMSS --set-mss %d
./bin/cms:212360:iptables -A INPUT_SERVICE -i %s -p udp --dport 67:68 -j ACCEPT 2>/dev/null
./bin/cms:212362:iptables -A FWD_SERVICE -i br0 -o %s -d 239.0.0.0/8 -j DROP 2>/dev/null
./bin/cms:212363:ip6tables -t filter -F FWD_ABUSE_DFT 2>/dev/null
./bin/cms:212367:ip6tables -t filter -F FWD_ABUSE_USR 2>/dev/null
./bin/cms:212392:iptables -t filter -F FWD_ABUSE_DFT 2>/dev/null
./bin/cms:212393:iptables -t filter -F FWD_ABUSE_USR 2>/dev/null
./bin/cms:212394:iptables -D INPUT_LAN_SUBNET %s br0 -s %s/%s -j DROP 2>/dev/null
./bin/cms:212398:iptables -D FWD_LAN_SUBNET %s br0 -s %s/%s -j DROP 2>/dev/null
./bin/cms:212400:iptables -D FWD_LAN_SUBNET -i br0 %s %s/%s -j DROP 2>/dev/null
./bin/cms:212402:iptables -t nat -D PRE_LAN_SUBNET -i br0 -m ttl --ttl 0 %s %s/%s -j DROP 2>/dev/null
./bin/cms:212406:iptables -t nat -D PRE_LAN_SUBNET -i br0 -m ttl --ttl 1 %s %s/%s -j DROP 2>/dev/null
./bin/cms:212410:iptables -t mangle -D PREROUTING -i br0 -m ttl --ttl 0 %s %s/%s -j DROP 2>/dev/null
./bin/cms:212411:iptables -t mangle -D PREROUTING -i br0 -m ttl --ttl 1 %s %s/%s -j DROP 2>/dev/null
./bin/cms:212412:ebtables -D INPUT_DEFAULT -p IPv4 --ip-proto igmp --ip-src ! %s/%s  -j DROP 2>/dev/null
./bin/cms:212413:iptables -D INPUT_FIREWALL -i br0 -p tcp %s %s -j DROP 2>/dev/null
./bin/cms:212415:iptables -D INPUT_FIREWALL -i br0 -p udp --dport 53 %s %s -j DROP 2>/dev/null
./bin/cms:212418:iptables -D INPUT_FIREWALL -i br0 -p icmp %s %s -j DROP 2>/dev/null
./bin/cms:212419:ip6tables -A INPUT_SERVICE -i %s -p %s --dport %d:%d -j ACCEPT 2>/dev/null
./bin/cms:212421:ip6tables -A INPUT_SERVICE -i %s -p %s --dport %d -j ACCEPT 2>/dev/null
./bin/cms:212422:ip6tables -%c INPUT_SERVICE -i %s -p tcp --dport %d -j ACCEPT
./bin/cms:212425:ip6tables -%c INPUT_SERVICE -i %s -p udp --dport %d -j ACCEPT
./bin/cms:212428:ip6tables -%c FWD_SERVICE -i %s -p tcp --dport %d -j ACCEPT 2>/dev/null
./bin/cms:212429:ip6tables -%c FWD_SERVICE -i %s -p udp --dport %d -j ACCEPT 2>/dev/null
./bin/cms:212430:iptables -D INPUT_SERVICE %s br0 -s 169.254.0.0/16 -j DROP 2>/dev/null
./bin/cms:212432:iptables -D FWD_SERVICE %s br0 -s 169.254.0.0/16 -j DROP 2>/dev/null
./bin/cms:212436:iptables -D INPUT_SERVICE %s br0 -s 127.0.0.0/8 -j DROP 2>/dev/null
./bin/cms:212437:iptables -D FWD_SERVICE %s br0 -s 127.0.0.0/8 -j DROP 2>/dev/null
./bin/cms:212440:iptables -D INPUT_FIREWALL %s br0 -j DROP 2>/dev/null
./bin/cms:212443:iptables -D INPUT_FIREWALL -p tcp -i br0 --syn -m limit --limit 10/s  --limit-burst 50 -j ACCEPT 2>/dev/null
./bin/cms:212447:iptables -D INPUT_FIREWALL -p tcp -i br0 --syn -j DROP  2>/dev/null
./bin/cms:212448:ip6tables -D INPUT_FIREWALL -p tcp -i br0 --syn -m limit --limit 10/s  --limit-burst 50 -j ACCEPT 2>/dev/null
./bin/cms:212451:ip6tables -D INPUT_FIREWALL -p tcp -i br0 --syn -j DROP  2>/dev/null
./bin/cms:212455:iptables -A INPUT_SERVICE %s br0 -s 169.254.0.0/16 -j DROP 2>/dev/null
./bin/cms:212457:iptables -A FWD_SERVICE %s br0 -s 169.254.0.0/16 -j DROP 2>/dev/null
./bin/cms:212461:iptables -A INPUT_SERVICE %s br0 -s 127.0.0.0/8 -j DROP 2>/dev/null
./bin/cms:212462:iptables -A FWD_SERVICE %s br0 -s 127.0.0.0/8 -j DROP 2>/dev/null
./bin/cms:212465:iptables -A INPUT_FIREWALL -p tcp -i br0 --syn -m limit --limit 10/s  --limit-burst 50 -j ACCEPT 2>/dev/null
./bin/cms:212469:iptables -A INPUT_FIREWALL -p tcp -i br0 --syn -j DROP  2>/dev/null
./bin/cms:212470:ip6tables -A INPUT_FIREWALL -p tcp -i br0 --syn -m limit --limit 10/s  --limit-burst 50 -j ACCEPT 2>/dev/null
./bin/cms:212473:ip6tables -A INPUT_FIREWALL -p tcp -i br0 --syn -j DROP  2>/dev/null
./bin/cms:212477:iptables -A INPUT_FIREWALL %s br0 -j DROP 2>/dev/null
./bin/cms:212499:ip6tables -I FORWARD_FIREWALL -o %s  -d fd00::/8 -j REJECT --reject-with icmp6-addr-unreachable 2>/dev/null
./bin/cms:212500:ip6tables -I FORWARD_FIREWALL -o %s  -d fec0::/10 -j REJECT --reject-with icmp6-addr-unreachable 2>/dev/null
./bin/cms:212508:iptables -D INPUT_SERVICE -i %s -p udp --dport %d:%d -j ACCEPT 2>/dev/null
./bin/cms:212510:iptables -%c INPUT_SERVICE -i %s -p udp --dport %d:%d -j ACCEPT 2>/dev/null
./bin/cms:212511:iptables -t nat -D PRE_SERVICE -i %s -p udp --dport %d:%d -j ACCEPT 2>/dev/null
./bin/cms:212512:iptables -t nat -%c PRE_SERVICE -i %s -p udp --dport %d:%d -j ACCEPT 2>/dev/null
./bin/cms:212516:iptables -t nat -D PRE_DONAT -i br0 -p udp -m multiport --dports 5060,%d -j REDIRECT --to-ports %d 2>/dev/null
./bin/cms:212518:iptables -t nat -A PRE_DONAT -i br0 -p udp -m multiport --dports 5060,%d -j REDIRECT --to-ports %d 2>/dev/null
./bin/cms:212520:iptables -A FWD_FIREWALL -o nas+ -j DROP 2>/dev/null
./bin/cms:212524:iptables -A OUTPUT -p igmp -o nas+ -j DROP 2>/dev/null
./bin/cms:212526:ebtables -A INPUT -i nas+ -j DROP 2>/dev/null
./bin/cms:212529:ebtables -A OUTPUT -o nas+ -j DROP 2>/dev/null
./bin/cms:212531:ebtables -A FWD_DEFAULT -i wl0.1 -j DROP 2>/dev/null
./bin/cms:212535:ebtables -A FWD_DEFAULT -i wl1.1 -j DROP 2>/dev/null
./bin/cms:212539:iptables -A INPUT_SERVICE -i nas+ -p tcp --dport 7547 -j DROP
./bin/cms:212542:iptables -A FWD_SERVICE -i nas+ -o ppp+ -j DROP 2>/dev/null
./bin/cms:212543:iptables -A OUTPUT -i nas+ -o ppp+ -j DROP 2>/dev/null
./bin/cms:212545:iptables -A FWD_SERVICE -i ppp+ -o nas+ -j DROP 2>/dev/null
./bin/cms:212546:iptables -A OUTPUT -i ppp+ -o nas+ -j DROP 2>/dev/null
./bin/cms:212548:iptables -A FWD_SERVICE -i br0 -d 169.254.0.0/16 -j DROP 2>/dev/null
./bin/cms:212552:iptables -t nat -D PRE_DONAT -i br0 -p udp -m multiport --dports 5060,56005 -j REDIRECT --to-ports 56005 2>/dev/null
./bin/cms:212556:iptables -t nat -A PRE_DONAT -i br0 -p udp -m multiport --dports 5060,56005 -j REDIRECT --to-ports 56005 2>/dev/null
./bin/cms:212560:ip6tables -A FORWARD_FIREWALL -p ipv6-icmp -j FORWARD_ICMP_LAN
./bin/cms:212562:ip6tables -A FORWARD_ICMP_LAN -i br+ -p ipv6-icmp --icmpv6-type 128/0 -j ACCEPT
./bin/cms:212563:ip6tables -A FORWARD_ICMP_LAN -i br+ -p ipv6-icmp --icmpv6-type 129/0 -j ACCEPT
./bin/cms:212564:ip6tables -A FORWARD_ICMP_LAN -i br+ -p ipv6-icmp --icmpv6-type 1/0 -j ACCEPT
./bin/cms:212567:ip6tables -A FORWARD_ICMP_LAN -i br+ -p ipv6-icmp --icmpv6-type 1/1 -j ACCEPT
./bin/cms:212570:ip6tables -A FORWARD_ICMP_LAN -i br+ -p ipv6-icmp --icmpv6-type 1/3 -j ACCEPT
./bin/cms:212573:ip6tables -A FORWARD_ICMP_LAN -i br+ -p ipv6-icmp --icmpv6-type 1/4 -j ACCEPT
./bin/cms:212576:ip6tables -A FORWARD_ICMP_LAN -i br+ -p ipv6-icmp --icmpv6-type 2 -j ACCEPT
./bin/cms:212577:ip6tables -A FORWARD_ICMP_LAN -i br+ -p ipv6-icmp --icmpv6-type 3/0 -j ACCEPT
./bin/cms:212580:ip6tables -A FORWARD_ICMP_LAN -i br+ -p ipv6-icmp --icmpv6-type 3/1 -j ACCEPT
./bin/cms:212583:ip6tables -A FORWARD_ICMP_LAN -i br+ -p ipv6-icmp -m frag -j ACCEPT
./bin/cms:212584:ip6tables -A FORWARD_FIREWALL -p ipv6-icmp -j REJECT --reject-with icmp6-addr-unreachable 2>/dev/null
./bin/cms:212587:ip6tables -A FORWARD_FIREWALL ! -i br+  -j DROP
./bin/cms:212588:ip6tables -I FORWARD_DT -i br0 -o %s -j REJECT --reject-with icmp6-addr-unreachable 2>/dev/null
./bin/cms:212589:ip6tables -I FORWARD_FIREWALL -o %s -d fd00::/8 -j REJECT --reject-with icmp6-addr-unreachable 2>/dev/null
./bin/cms:212591:ip6tables -I FORWARD_FIREWALL -o %s -d fec0::/10 -j REJECT --reject-with icmp6-addr-unreachable 2>/dev/null
./bin/cms:212592:ip6tables -A FORWARD_ICMP_WAN ! -i br+ -o br+ -p ipv6-icmp --icmpv6-type 128/0 -j ACCEPT
./bin/cms:212596:ip6tables -A FORWARD_ICMP_WAN ! -i br+ -o br+  -p ipv6-icmp --icmpv6-type 129/0 -j ACCEPT
./bin/cms:212599:ip6tables -A FORWARD_ICMP_WAN ! -i br+ -o br+  -p ipv6-icmp --icmpv6-type 1/0 -j ACCEPT
./bin/cms:212600:ip6tables -A FORWARD_ICMP_WAN ! -i br+ -o br+  -p ipv6-icmp --icmpv6-type 1/1 -j ACCEPT
./bin/cms:212601:ip6tables -A FORWARD_ICMP_WAN ! -i br+ -o br+  -p ipv6-icmp --icmpv6-type 1/3 -j ACCEPT
./bin/cms:212602:ip6tables -A FORWARD_ICMP_WAN ! -i br+ -o br+  -p ipv6-icmp --icmpv6-type 1/4 -j ACCEPT
./bin/cms:212603:ip6tables -A FORWARD_ICMP_WAN ! -i br+ -o br+  -p ipv6-icmp --icmpv6-type 2 -j ACCEPT
./bin/cms:212606:ip6tables -A FORWARD_ICMP_WAN ! -i br+ -o br+  -p ipv6-icmp --icmpv6-type 3/0 -j ACCEPT
./bin/cms:212607:ip6tables -A FORWARD_ICMP_WAN ! -i br+ -o br+   -p ipv6-icmp --icmpv6-type 3/1 -j ACCEPT
./bin/cms:212611:ip6tables -A FORWARD_ICMP_WAN ! -i br+ -o br+ -p ipv6-icmp -m frag -j ACCEPT
./bin/cms:212615:ip6tables -A INPUT_DT ! -i br+  -p ipv6-icmp --icmpv6-type 2 -j ACCEPT
./bin/cms:212617:ip6tables -A OUTPUT -o nas+ -j DROP
./bin/cms:212618:ip6tables -A OUTPUT ! -o br+ -p ipv6-icmp --icmpv6-type 137/0 -j DROP
./bin/cms:212621:ip6tables -A OUTPUT ! -o br+ -s fe80::/10 -j ACCEPT
./bin/cms:212622:ip6tables -A OUTPUT ! -o br+ -d 2003::/3 -j ACCEPT
./bin/cms:212624:ip6tables -A OUTPUT -o br0 -j ACCEPT
./bin/cms:212628:ip6tables -A OUTPUT -o lo -j ACCEPT
./bin/cms:212629:ip6tables -A OUTPUT -j DROP
./bin/cms:212630:ip6tables -A INPUT_DT -p ipv6-icmp --icmpv6-type 128/0 -m limit --limit 5/s --limit-burst 1 -j ACCEPT
./bin/cms:212633:ip6tables -A INPUT_DT ! -i br+ -s fe80::/10 -d fe80::/10 -p ipv6-icmp --icmpv6-type 129/0 -j ACCEPT
./bin/cms:212634:ip6tables -A INPUT_DT ! -i br+ -s fe80::/10 -p ipv6-icmp --icmpv6-type 1/0 -j ACCEPT
./bin/cms:212638:ip6tables -A INPUT_DT ! -i br+ -s fe80::/10 -p ipv6-icmp --icmpv6-type 1/1 -j ACCEPT
./bin/cms:212642:ip6tables -A INPUT_DT ! -i br+ -s fe80::/10 -p ipv6-icmp --icmpv6-type 1/3 -j ACCEPT
./bin/cms:212646:ip6tables -A INPUT_DT ! -i br+ -s fe80::/10 -p ipv6-icmp --icmpv6-type 1/4 -j ACCEPT
./bin/cms:212650:ip6tables -A INPUT_DT ! -i br+ -s fe80::/10 -p ipv6-icmp --icmpv6-type 3/0 -j ACCEPT
./bin/cms:212654:ip6tables -A INPUT_DT ! -i br+ -s fe80::/10 -p ipv6-icmp --icmpv6-type 3/1 -j ACCEPT
./bin/cms:212658:ip6tables -A INPUT_DT ! -i br+ -s fe80::/10 -p ipv6-icmp --icmpv6-type 133 -j ACCEPT
./bin/cms:212662:ip6tables -A INPUT_DT ! -i br+ -s fe80::/10 -p ipv6-icmp --icmpv6-type 134 -j ACCEPT
./bin/cms:212666:ip6tables -A INPUT_DT -s fe80::/10 -p ipv6-icmp --icmpv6-type 135 -m limit --limit 10/s --limit-burst 10 -j ACCEPT
./bin/cms:212668:ip6tables -A INPUT_DT ! -i br+ -s fe80::/10 -p ipv6-icmp --icmpv6-type 136 -j ACCEPT
./bin/cms:212672:ip6tables -A INPUT_DT ! -i br+ -s fe80::/10 -p ipv6-icmp --icmpv6-type 130 -j ACCEPT
./bin/cms:212676:ip6tables -A INPUT_DT -s fe80::/10 -p ipv6-icmp --icmpv6-type 135 -j DROP
./bin/cms:212679:ip6tables -A INPUT_DT ! -i br+ -s 2003::/3 -p ipv6-icmp --icmpv6-type 129/0 -j ACCEPT
./bin/cms:212682:ip6tables -A INPUT_DT -s 2003::/3 -p ipv6-icmp --icmpv6-type 135 -m limit --limit 10/s --limit-burst 10 -j ACCEPT
./bin/cms:212685:ip6tables -A INPUT_DT ! -i br+ -s 2003::/3 -p ipv6-icmp --icmpv6-type 1/0 -j ACCEPT
./bin/cms:212686:ip6tables -A INPUT_DT ! -i br+ -s 2003::/3 -p ipv6-icmp --icmpv6-type 1/1 -j ACCEPT
./bin/cms:212687:ip6tables -A INPUT_DT ! -i br+ -s 2003::/3 -p ipv6-icmp --icmpv6-type 1/3 -j ACCEPT
./bin/cms:212688:ip6tables -A INPUT_DT ! -i br+ -s 2003::/3 -p ipv6-icmp --icmpv6-type 1/4 -j ACCEPT
./bin/cms:212689:ip6tables -A INPUT_DT ! -i br+ -s 2003::/3 -p ipv6-icmp --icmpv6-type 3/0 -j ACCEPT
./bin/cms:212690:ip6tables -A INPUT_DT ! -i br+ -s 2003::/3 -p ipv6-icmp --icmpv6-type 3/1 -j ACCEPT
./bin/cms:212691:ip6tables -A INPUT_DT -s 2003::/3 -p ipv6-icmp --icmpv6-type 135 -j DROP
./bin/cms:212695:ip6tables -A INPUT_DT -p ipv6-icmp --icmpv6-type 128/0 -j DROP
./bin/cms:212697:ip6tables -A INPUT_DT ! -i br+ -p udp --dport 53 -j DROP
./bin/cms:212701:ip6tables -A INPUT_DT ! -i br+ -p udp -j ACCEPT
./bin/cms:212702:ip6tables -I INPUT -i lo -j ACCEPT
./bin/cms:212704:ip6tables -t filter -I INPUT 1 -i br0 -m mark --mark 0x00000010/0x00000010 -j REJECT --reject-with icmp6-dst-unreachable 2>/dev/null
./bin/cms:212708:ip6tables -t mangle -A PREROUTING -i br0 -j MARK --set-mark 0x00000010/0x00000010 2>/dev/null
./bin/cms:212711:ip6tables -t mangle  -A PRE_LAN_SUBNET -i br0 -s fe80::/10 -j ACCEPT
./bin/cms:212715:ip6tables -t mangle  -A PRE_LAN_SUBNET -i br0 -s fd00::/8  -j ACCEPT
./bin/cms:212719:ip6tables -t mangle  -A PRE_LAN_SUBNET -i br0 -s 0::/128  -j ACCEPT
./bin/cms:212720:ip6tables -t mangle -A PRE_LAN_SUBNET -i br0 -p ipv6-icmp --icmpv6-type 136 -j ACCEPT
./bin/cms:212723:ip6tables -A INPUT_FIREWALL %s br0 -j DROP
./bin/cms:212725:ip6tables -I INPUT -i br0 -p udp --dport 53 %s fe80::1 -j DROP 2>/dev/null
./bin/cms:212727:ip6tables -I INPUT -i br0 -p tcp -m multiport --dports 23,53,80,443 %s fe80::1 -j DROP 2>/dev/null
./bin/cms:212729:ip6tables -I INPUT -i ppp+ -s fe80::1 -p ipv6-icmp --icmpv6-type 134 -j DROP
./bin/cms:212733:ebtables -I FWD_DEFAULT 1 -i wl+ -o eth+ -p IPv4 --ip-proto igmp -j DROP 2>/dev/null
./bin/cms:212737:ebtables -I FWD_DEFAULT 1 -i wl+ -o wl+ -p IPv4 --ip-proto igmp -j DROP 2>/dev/null
./bin/cms:212738:ebtables -I FWD_DEFAULT 1 -i eth+ -o wl+ -p IPv4 --ip-proto igmp -j DROP 2>/dev/null
./bin/cms:212742:ebtables -I FWD_DEFAULT 1 -i eth+ -o eth+ -p IPv4 --ip-proto igmp -j DROP 2>/dev/null
./bin/cms:212745:iptables -D FWD_FIREWALL -o nas+ -j DROP 2>/dev/null
./bin/cms:212749:iptables -D OUTPUT -p igmp -o nas+ -j DROP 2>/dev/null
./bin/cms:212753:ebtables -A INPUT_FILTER -i eth0.%d -s %s -j ACCEPT >/dev/null
./bin/cms:212755:ebtables -A INPUT_FILTER -i eth0.%d -j DROP >/dev/null
./bin/cms:212757:ebtables -D INPUT_FILTER -i eth0.%d -j DROP >/dev/null
./bin/cms:212759:ebtables -D INPUT_FILTER -i eth0.%d -s %s -j ACCEPT >/dev/null
./bin/cms:212952:ebtables -D INPUT_FILTER -i wl0.1 -j ACCEPT
./bin/cms:212953:ebtables -D INPUT_FILTER -i wl1.1 -j ACCEPT
./bin/cms:212954:ebtables -I INPUT_FILTER 1 -i wl0.1 -j ACCEPT
./bin/cms:212957:ebtables -I INPUT_FILTER 1 -i wl1.1 -j ACCEPT
./bin/cms:212960:ebtables -%c FWD_DEFAULT -s %s -j ACCEPT
./bin/cms:212964:ebtables -%c INPUT_FILTER -s %s -j ACCEPT
./bin/cms:212975:ebtables -%c FWD_DEFAULT %s %s -s %s -j ACCEPT
./bin/cms:212977:ebtables -%c INPUT_FILTER %s %s -s %s -j ACCEPT
./bin/cms:212978:ebtables -A FWD_TIMERULE -s %s -j DROP
./bin/cms:212980:ebtables -A INPUT_TIMERULE -p IPv4 --ip-proto udp --ip-source-port 68 --ip-destination-port 67 -s %s -j ACCEPT
./bin/cms:212982:ebtables -A INPUT_TIMERULE -p IPv6 --ip6-dst fe80::1 -s %s -j ACCEPT
./bin/cms:212986:ebtables -A INPUT_TIMERULE -p IPv6 --ip6-proto udp --ip6-sport 546 --ip6-dport 547 -s %s -j ACCEPT
./bin/cms:212988:ebtables -A INPUT_TIMERULE -p IPv4 --ip-destination ! %s/%s -s %s -j DROP
./bin/cms:212991:ebtables -A INPUT_TIMERULE -p IPv6 -s %s -j DROP
./bin/cms:212995:ebtables -D FWD_TIMERULE -s %s -j DROP
./bin/cms:212997:ebtables -D INPUT_TIMERULE -p IPv4 --ip-proto udp --ip-source-port 68 --ip-destination-port 67 -s %s -j ACCEPT
./bin/cms:212999:ebtables -D INPUT_TIMERULE -p IPv6 --ip6-dst fe80::1 -s %s -j ACCEPT
./bin/cms:213003:ebtables -D INPUT_TIMERULE -p IPv6 --ip6-proto udp --ip6-sport 546 --ip6-dport 547 -s %s -j ACCEPT
./bin/cms:213005:ebtables -D INPUT_TIMERULE -p IPv4 --ip-destination ! %s/%s -s %s -j DROP
./bin/cms:213008:ebtables -D INPUT_TIMERULE -p IPv6 -s %s -j DROP
./bin/cms:213025:iptables -%c INPUT -m mac --mac-source  %s %s -j DROP
./bin/cms:213028:ip6tables -%c INPUT -m mac --mac-source  %s %s -j DROP
./bin/cms:213030:iptables -%c INPUT -m mac --mac-source  %s %s -m string --string %s --algo kmp -j ACCEPT
./bin/cms:213037:ip6tables -%c INPUT -m mac --mac-source  %s %s -m string --string %s --algo kmp -j ACCEPT
./bin/cms:213048:iptables -%c FWD_LAN -m mac --mac-source  %s %s -j DROP
./bin/cms:213049:ip6tables -%c FORWARD_FIREWALL -m mac --mac-source  %s %s -j DROP
./bin/cms:213163:iptables -t filter -D FWD_ABUSE -m limit --limit 1/m -j LOG --log-level 1 2>/dev/null
./bin/cms:213166:iptables -t filter -D FWD_ABUSE -j DROP 2>/dev/null
./bin/cms:213167:ip6tables -t filter -D FWD_ABUSE -m limit --limit 1/m -j LOG --log-level 1 2>/dev/null
./bin/cms:213169:ip6tables -t filter -D FWD_ABUSE -j DROP 2>/dev/null
./bin/cms:213578:iptables -t mangle -I FORWARD -s 172.17.2.0/24 -j MARK --set-mark 0x1
./bin/cms:213635:iptables -D INPUT -p udp --sport 1812 -j ACCEPT 2> /dev/null
./bin/cms:213639:iptables -I INPUT -p udp --sport 1812 -j ACCEPT
./bin/cms:213764:iptables -t mangle -A OUTPUT -p udp --dport 1701 -j MARK --set-mark %x
./bin/cms:213766:iptables -A OUTPUT -o ppp256 -d 127.0.0.1 -j DROP
./bin/cms:213781:iptables -t mangle -D FORWARD -s 172.17.2.0/24 -j MARK --set-mark 0x1
./bin/cms:214245:ip6tables -D FORWARD -i br+ -j HTTP_REDIRECT
./bin/cms:214249:ip6tables -D HTTP_REDIRECT -p tcp -m multiport --destination-ports 80,443 -i br+ -j RETURN
./bin/cms:214251:ip6tables -D HTTP_REDIRECT -j DROP
./bin/cms:214253:iptables -D FORWARD -i br+ -j HTTP_REDIRECT
./bin/cms:214254:iptables -D HTTP_REDIRECT -p tcp -m multiport --destination-ports 80,443 -i br+ -j RETURN
./bin/cms:214257:iptables -D HTTP_REDIRECT -j DROP
./bin/cms:214267:ip6tables -N HTTP_REDIRECT
./bin/cms:214269:ip6tables -I FORWARD -i br+ -j HTTP_REDIRECT
./bin/cms:214273:ip6tables -A HTTP_REDIRECT -p tcp -m multiport --destination-ports 80,443 -i br+ -j RETURN
./bin/cms:214275:ip6tables -A HTTP_REDIRECT -j DROP
./bin/cms:214277:iptables -N HTTP_REDIRECT
./bin/cms:214280:iptables -I FORWARD -i br+ -j HTTP_REDIRECT
./bin/cms:214281:iptables -A HTTP_REDIRECT -p tcp -m multiport --destination-ports 80,443 -i br+ -j RETURN
./bin/cms:214284:iptables -A HTTP_REDIRECT -j DROP
./bin/cms:214588:iptables -t mangle -D FWD_FILTER_LIST %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214591:ip6tables -t mangle -D FWD_FILTER_LIST %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214593:iptables -t mangle -%c FWD_FILTER_LIST %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214595:ip6tables -t mangle -%c FWD_FILTER_LIST %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214608:iptables -t mangle -D FWD_FILTER_LIST -p udp -m iprange %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214609:iptables -t mangle -D FWD_FILTER_LIST -p tcp -m iprange %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214610:iptables -t mangle -A FWD_FILTER_LIST -p tcp -m iprange %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214611:iptables -t mangle -A FWD_FILTER_LIST -p udp -m iprange %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214612:ip6tables -t mangle -D FWD_FILTER_LIST -p udp -m iprange %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214616:ip6tables -t mangle -D FWD_FILTER_LIST -p tcp -m iprange %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214620:ip6tables -t mangle -A FWD_FILTER_LIST -p tcp -m iprange %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214624:ip6tables -t mangle -A FWD_FILTER_LIST -p udp -m iprange %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214642:iptables -t mangle -D FWD_FILTER_LIST -p udp %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214646:iptables -t mangle -D FWD_FILTER_LIST -p tcp %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214650:iptables -t mangle -A FWD_FILTER_LIST -p udp %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214654:iptables -t mangle -A FWD_FILTER_LIST -p tcp %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214661:ip6tables -t mangle -D FWD_FILTER_LIST -p udp %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214664:ip6tables -t mangle -D FWD_FILTER_LIST -p tcp %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214667:ip6tables -t mangle -A FWD_FILTER_LIST -p udp %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214670:ip6tables -t mangle -A FWD_FILTER_LIST -p tcp %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214673:iptables -t mangle -D PRE_FILTER_LIST %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214676:ip6tables -t mangle -D PRE_FILTER_LIST %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214678:iptables -t mangle -%c PRE_FILTER_LIST %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214680:ip6tables -t mangle -%c PRE_FILTER_LIST %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214730:iptables -t mangle -D FWD_FILTER_LIST -m iprange %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214734:iptables -t mangle -A FWD_FILTER_LIST -m iprange %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214738:ip6tables -t mangle -D FWD_FILTER_LIST -m iprange %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214741:ip6tables -t mangle -A FWD_FILTER_LIST -m iprange %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:214899:iptables -D FORWARD -i br+ -m mark --mark 0x%x/0x%x -j DROP 2>/dev/null
./bin/cms:214900:iptables -I FORWARD -i br+ -m mark --mark 0x%x/0x%x -j DROP 2>/dev/null
./bin/cms:214901:iptables -D OUTPUT -m mark --mark 0x%x/0x%x -j DROP 2>/dev/null
./bin/cms:214902:iptables -I OUTPUT -m mark --mark 0x%x/0x%x -j DROP 2>/dev/null
./bin/cms:214903:ip6tables -D FORWARD -i br+ -m mark --mark 0x%x/0x%x -j DROP 2>/dev/null
./bin/cms:214907:ip6tables -I FORWARD -i br+ -m mark --mark 0x%x/0x%x -j DROP 2>/dev/null
./bin/cms:214911:ip6tables -I FORWARD -i br+  -m mark --mark 0x%x/0x%x -j DROP 2>/dev/null
./bin/cms:214914:ip6tables -D OUTPUT -m mark --mark 0x%x/0x%x -j DROP 2>/dev/null
./bin/cms:214918:ip6tables -I OUTPUT -m mark --mark 0x%x/0x%x -j DROP 2>/dev/null
./bin/cms:214922:iptables -t mangle -N FWD_FILTER_LIST
./bin/cms:214925:iptables -t mangle -N ROUTE_CTL_LIST
./bin/cms:214929:iptables -t mangle -A PREROUTING -i br0 -j ROUTE_CTL_LIST
./bin/cms:214932:iptables -t mangle -A OUTPUT -m mark --mark 0x%x/0x%x -j ROUTE_CTL_LIST
./bin/cms:214933:iptables -t mangle -N BLACK_LIST
./bin/cms:214937:iptables -t mangle -A ROUTE_CTL_LIST -j BLACK_LIST
./bin/cms:214939:iptables -t mangle -A ROUTE_CTL_LIST -m mark --mark 0x%x/0x%x -j ACCEPT
./bin/cms:214940:iptables -t mangle -N ROUTE_STATIC_LIST
./bin/cms:214941:iptables -t mangle -A ROUTE_CTL_LIST -j ROUTE_STATIC_LIST
./bin/cms:214944:iptables -t mangle -N ROUTE_OPTION121_LIST
./bin/cms:214946:iptables -t mangle -A ROUTE_CTL_LIST -j ROUTE_OPTION121_LIST
./bin/cms:214950:iptables -t mangle -A ROUTE_CTL_LIST -j FWD_FILTER_LIST
./bin/cms:214951:iptables -t mangle -N PRE_FILTER_LIST
./bin/cms:214954:iptables -t mangle -A PREROUTING -i br0 -j PRE_FILTER_LIST
./bin/cms:214956:ip6tables -t mangle -N FWD_FILTER_LIST
./bin/cms:214958:ip6tables -t mangle -N ROUTE_CTL_LIST
./bin/cms:214961:ip6tables -t mangle -I PREROUTING 1 -i br0 -j ROUTE_CTL_LIST
./bin/cms:214965:ip6tables -t mangle -N PRE_FILTER_LIST
./bin/cms:214967:ip6tables -t mangle -I PREROUTING 2 -i br0 -j PRE_FILTER_LIST
./bin/cms:214970:ip6tables -t mangle -A OUTPUT -d 2000::/3 -m mark --mark 0x%x/0x%x -j ROUTE_CTL_LIST
./bin/cms:214974:ip6tables -t mangle -N BLACK_LIST
./bin/cms:214977:ip6tables -t mangle -A ROUTE_CTL_LIST -j BLACK_LIST
./bin/cms:214978:ip6tables -t mangle -A ROUTE_CTL_LIST -m mark --mark 0x%x/0x%x -j ACCEPT
./bin/cms:214982:ip6tables -t mangle -A ROUTE_CTL_LIST -j FWD_FILTER_LIST
./bin/cms:214986:iptables -t nat -I POSTROUTING -o ppp256 -m mark --mark 0x%x/0x%x -j MASQUERADE
./bin/cms:214987:iptables -t nat -I POSTROUTING -m mark --mark 0x%x/0x%x -j MASQUERADE
./bin/cms:214990:iptables -I FORWARD -m mark --mark 0x%x/0x%x -j ACCEPT
./bin/cms:214992:ip6tables -I FORWARD -m mark --mark 0x%x/0x%x -j ACCEPT
./bin/cms:216018:ip6tables -I FORWARD -i %s --dst ff00::/8 -j ACCEPT
./bin/cms:216019:ip6tables -D FORWARD -i %s --dst ff00::/8 -j ACCEPT 2>/dev/null
./bin/cms:216049:iptables -t nat -D POSTROUTING -o %s -j MASQUERADE --mode fullcone 2>/dev/null
./bin/cms:216051:iptables -t nat -A POSTROUTING -o %s -j MASQUERADE --mode fullcone 2>/dev/null
./bin/cms:216119:iptables -D FORWARD -i br0 -o %s -j DROP 2>/dev/null
./bin/cms:216127:iptables -t nat -%c PRE_UPNP %s %s br+ -p %s --dport %d -j DNAT --to %s:%d
./bin/cms:216129:iptables -t nat -%c PRE_UPNP %s %s br+ -p %s --dport %d -j DNAT --to %s
./bin/cms:216130:iptables -%c FWD_SERVICE -p %s %s -d %s --dport %d -j ACCEPT 2>/dev/null
./bin/cms:216146:iptables -t nat -D POSTROUTING -o %s -j MASQUERADE 2>/dev/null
./bin/cms:216148:iptables -t nat -D POSTROUTING -s %s/%s -o %s -j MASQUERADE --mode fullcone 2>/dev/null
./bin/cms:216149:iptables -t nat -D PRE_SERVICE -p udp --dport 500 -i %s -j ACCEPT 2>/dev/null
./bin/cms:216152:iptables -t nat -D PRE_SERVICE -p esp -i %s -j ACCEPT 2>/dev/null
./bin/cms:216155:iptables -t nat -D POSTROUTING -o %s  -j MASQUERADE 2>/dev/null
./bin/cms:216156:iptables -t nat -A POSTROUTING -o %s  -j MASQUERADE 2>/dev/null
./bin/cms:216157:iptables -t nat -D POSTROUTING -o %s  -j MASQUERADE --mode fullcone 2>/dev/null
./bin/cms:216158:iptables -t nat -A POSTROUTING -o %s  -j MASQUERADE --mode fullcone 2>/dev/null
./bin/cms:216159:iptables -t nat -A PRE_SERVICE -p udp --dport 500 -i %s -j ACCEPT 2>/dev/null
./bin/cms:216162:iptables -t nat -A PRE_SERVICE -p esp -i %s -j ACCEPT 2>/dev/null
./bin/cms:216169:iptables -t nat -N PRE_UPNP 2>/dev/null
./bin/cms:216170:iptables -t nat -A PREROUTING -j PRE_UPNP 2>/dev/null
./bin/cms:216349:iptables -t filter -F 2>/dev/null
./bin/cms:216352:iptables -t nat -F 2>/dev/null
./bin/cms:216354:iptables -t mangle -F 2>/dev/null
./bin/cms:216357:iptables -t nat -N PRE_DONAT 2>/dev/null
./bin/cms:216361:iptables -t nat -A PREROUTING -j PRE_DONAT 2>/dev/null
./bin/cms:216363:iptables -t nat -N PRE_LAN_SUBNET 2>/dev/null
./bin/cms:216366:iptables -t nat -A PREROUTING -j PRE_LAN_SUBNET 2>/dev/null
./bin/cms:216367:iptables -t nat -N PRE_REDIR 2>/dev/null
./bin/cms:216371:iptables -t nat -A PREROUTING -j PRE_REDIR 2>/dev/null
./bin/cms:216373:iptables -t nat -N PRE_SERVICE 2>/dev/null
./bin/cms:216375:iptables -t nat -A PREROUTING -j PRE_SERVICE 2>/dev/null
./bin/cms:216379:iptables -t filter -N FWD_LAN_SUBNET 2>/dev/null
./bin/cms:216383:iptables -t filter -A FORWARD -j FWD_LAN_SUBNET 2>/dev/null
./bin/cms:216384:iptables -t filter -N FWD_SERVICE 2>/dev/null
./bin/cms:216387:iptables -t filter -A FORWARD -j FWD_SERVICE 2>/dev/null
./bin/cms:216391:iptables -t filter -N FWD_REDIR 2>/dev/null
./bin/cms:216392:iptables -t filter -A FORWARD -j FWD_REDIR 2>/dev/null
./bin/cms:216394:iptables -t filter -N FWD_FIREWALL 2>/dev/null
./bin/cms:216396:iptables -t filter -A FORWARD -j FWD_FIREWALL 2>/dev/null
./bin/cms:216399:iptables -t filter -N FWD_ABUSE 2>/dev/null
./bin/cms:216400:iptables -t filter -N FWD_ABUSE_DFT 2>/dev/null
./bin/cms:216401:iptables -t filter -N FWD_ABUSE_USR 2>/dev/null
./bin/cms:216402:iptables -t filter -A FORWARD -i br0 -o ppp+ -p tcp -m multiport --dports %s -j FWD_ABUSE 2>/dev/null
./bin/cms:216407:iptables -t filter -A FORWARD -i br0 -o ppp+ -p udp -m multiport --dports %s -j FWD_ABUSE 2>/dev/null
./bin/cms:216410:iptables -t filter -A FORWARD -i br0 -o gre+ -p tcp -m multiport --dports %s -j FWD_ABUSE 2>/dev/null
./bin/cms:216413:iptables -t filter -A FORWARD -i br0 -o gre+ -p udp -m multiport --dports %s -j FWD_ABUSE 2>/dev/null
./bin/cms:216416:iptables -t filter -A FWD_ABUSE -j FWD_ABUSE_DFT 2>/dev/null
./bin/cms:216420:iptables -t filter -A FWD_ABUSE -j FWD_ABUSE_USR 2>/dev/null
./bin/cms:216424:iptables -N FWD_LAN 2>/dev/null
./bin/cms:216425:iptables -A FORWARD -i br0 -j FWD_LAN 2>/dev/null
./bin/cms:216428:iptables -t filter -N INPUT_LAN_SUBNET 2>/dev/null
./bin/cms:216430:iptables -t filter -A INPUT -j INPUT_LAN_SUBNET 2>/dev/null
./bin/cms:216431:iptables -t filter -N INPUT_FON 2>/dev/null
./bin/cms:216432:iptables -t filter -A INPUT -i %s -j INPUT_FON 2>/dev/null
./bin/cms:216438:iptables -t filter -A INPUT_FON -p tcp -m tcp --dport 3990 --syn -j ACCEPT 2>/dev/null
./bin/cms:216440:iptables -t filter -A INPUT_FON -p udp -m udp --dport 53 -j ACCEPT 2>/dev/null
./bin/cms:216442:iptables -t filter -A INPUT_FON -j DROP 2>/dev/null
./bin/cms:216443:iptables -t filter -N INPUT_SERVICE 2>/dev/null
./bin/cms:216444:iptables -t filter -A INPUT -j INPUT_SERVICE 2>/dev/null
./bin/cms:216448:iptables -t filter -N INPUT_FIREWALL 2>/dev/null
./bin/cms:216452:iptables -t filter -A INPUT -j INPUT_FIREWALL 2>/dev/null
./bin/cms:216455:ip6tables -I INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT 2>/dev/null
./bin/cms:216458:ip6tables -I FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT 2>/dev/null
./bin/cms:216459:ip6tables -t filter -N INPUT_DT 2>/dev/null
./bin/cms:216460:ip6tables -t filter -I INPUT -j INPUT_DT 2>/dev/null
./bin/cms:216464:ip6tables -t filter -N INPUT_SERVICE 2>/dev/null
./bin/cms:216468:ip6tables -t filter -A INPUT -j INPUT_SERVICE 2>/dev/null
./bin/cms:216471:ip6tables -t filter -N INPUT_FIREWALL 2>/dev/null
./bin/cms:216474:ip6tables -t filter -A INPUT -j INPUT_FIREWALL 2>/dev/null
./bin/cms:216476:ip6tables -t filter -N FWD_ABUSE 2>/dev/null
./bin/cms:216480:ip6tables -t filter -N FWD_ABUSE_DFT 2>/dev/null
./bin/cms:216484:ip6tables -t filter -N FWD_ABUSE_USR 2>/dev/null
./bin/cms:216488:ip6tables -t filter -A FORWARD -i br0 -o ppp+ -p tcp -m multiport --dports %s -j FWD_ABUSE 2>/dev/null
./bin/cms:216490:ip6tables -t filter -A FORWARD -i br0 -o ppp+ -p udp -m multiport --dports %s -j FWD_ABUSE 2>/dev/null
./bin/cms:216492:ip6tables -t filter -A FORWARD -i br0 -o gre+ -p tcp -m multiport --dports %s -j FWD_ABUSE 2>/dev/null
./bin/cms:216494:ip6tables -t filter -A FORWARD -i br0 -o gre+ -p udp -m multiport --dports %s -j FWD_ABUSE 2>/dev/null
./bin/cms:216496:ip6tables -t filter -A FWD_ABUSE -j FWD_ABUSE_DFT 2>/dev/null
./bin/cms:216499:ip6tables -t filter -A FWD_ABUSE -j FWD_ABUSE_USR 2>/dev/null
./bin/cms:216502:ip6tables -t filter -N FORWARD_DT 2>/dev/null
./bin/cms:216505:ip6tables -t filter -A FORWARD -j FORWARD_DT 2>/dev/null
./bin/cms:216509:ip6tables -t filter -N FORWARD_ICMP_WAN 2>/dev/null
./bin/cms:216510:ip6tables -t filter -A FORWARD_DT ! -i br+ -p ipv6-icmp -j FORWARD_ICMP_WAN 2>/dev/null
./bin/cms:216511:ip6tables -t filter -N FORWARD_ICMP_LAN 2>/dev/null
./bin/cms:216512:ip6tables -t filter -N FORWARD_PREFIX 2>/dev/null
./bin/cms:216515:ip6tables -t filter -A FORWARD -j FORWARD_PREFIX 2>/dev/null
./bin/cms:216519:ip6tables -t filter -N FORWARD_FIREWALL 2>/dev/null
./bin/cms:216520:ip6tables -t filter -A FORWARD -j FORWARD_FIREWALL 2>/dev/null
./bin/cms:216522:ip6tables -t mangle -N PRE_LAN_SUBNET  2>/dev/null
./bin/cms:216524:ip6tables -t mangle -A PREROUTING -j PRE_LAN_SUBNET 2>/dev/null
./bin/cms:216525:iptables -I INPUT -p ALL -m state --state ESTABLISHED,RELATED -j ACCEPT 2>/dev/null
./bin/cms:216526:iptables -I FORWARD -p ALL -m state --state ESTABLISHED,RELATED -j ACCEPT 2>/dev/null
./bin/cms:216529:iptables -I FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu 2>/dev/null
./bin/cms:216533:iptables -I INPUT -i lo -j ACCEPT 2>/dev/null
./bin/cms:216536:ebtables -F 2>/dev/null
./bin/cms:216537:ebtables -N INPUT_DEFAULT 2>/dev/null
./bin/cms:216540:ebtables -P INPUT_DEFAULT RETURN 2>/dev/null
./bin/cms:216544:ebtables -N INPUT_FILTER 2>/dev/null
./bin/cms:216548:ebtables -P INPUT_FILTER RETURN 2>/dev/null
./bin/cms:216549:ebtables -N INPUT_TIMERULE 2>/dev/null
./bin/cms:216551:ebtables -P INPUT_TIMERULE RETURN 2>/dev/null
./bin/cms:216554:ebtables -A INPUT -j INPUT_DEFAULT 2>/dev/null
./bin/cms:216556:ebtables -A INPUT -j INPUT_FILTER 2>/dev/null
./bin/cms:216559:ebtables -A INPUT -j INPUT_TIMERULE 2>/dev/null
./bin/cms:216560:ebtables -N FWD_DEFAULT 2>/dev/null
./bin/cms:216561:ebtables -P FWD_DEFAULT RETURN 2>/dev/null
./bin/cms:216563:ebtables -N FWD_PPPOE 2>/dev/null
./bin/cms:216566:ebtables -P FWD_PPPOE RETURN 2>/dev/null
./bin/cms:216570:ebtables -N FWD_TIMERULE 2>/dev/null
./bin/cms:216574:ebtables -P FWD_TIMERULE RETURN 2>/dev/null
./bin/cms:216575:ebtables -A FORWARD -j FWD_DEFAULT 2>/dev/null
./bin/cms:216577:ebtables -A FORWARD -j FWD_TIMERULE 2>/dev/null
./bin/cms:216578:iptables -t mangle -I PREROUTING -i %s -j DROP 2>/dev/null
./bin/cms:216580:iptables -t filter -I FORWARD -o %s -j DROP 2>/dev/null
./bin/cms:216581:iptables -t nat -A POSTROUTING -o %s -j MASQUERADE 2>/dev/null
./bin/cms:216583:iptables -t filter -I INPUT -i br0 -d 172.17.2.0/24 -j DROP 2>/dev/null
./bin/cms:216584:iptables -t filter -I FORWARD  -i br0 -o %s -j DROP 2>/dev/null
./bin/cms:216585:iptables -t filter -I FORWARD  -i %s -o br0 -j DROP 2>/dev/null
./bin/cms:216586:iptables -t filter -N FWD_FON 2>/dev/null
./bin/cms:216589:iptables -t filter -A FORWARD -i %s -j FWD_FON 2>/dev/null
./bin/cms:216591:iptables -t filter -A FORWARD -o %s -j FWD_FON 2>/dev/null
./bin/cms:216594:ebtables -A INPUT_DEFAULT -i %s -p IPV4 --ip-dst %s/24 -j DROP 2>/dev/null
./bin/cms:216596:iptables -t nat -I POSTROUTING -o br0 -s %s/24 -d %s/24 -j MASQUERADE 2>/dev/null
./bin/cms:216602:iptables -A INPUT_SERVICE -p 2 -i %s -j ACCEPT
./bin/cms:216604:iptables -A FWD_SERVICE -i %s -d 224.0.0.0/4 -j ACCEPT
./bin/cms:216606:iptables -t nat -A PRE_DONAT -p 2 -i %s -j ACCEPT
./bin/cms:216609:iptables -t nat -A PRE_SERVICE -d 224.0.0.0/4 -i %s -j ACCEPT
./bin/cms:216612:iptables -D INPUT_SERVICE -p 2 -i %s -j ACCEPT 2>/dev/null
./bin/cms:216614:iptables -D FWD_SERVICE -i %s -d 224.0.0.0/4 -j ACCEPT 2>/dev/null
./bin/cms:216616:iptables -t nat -D PRE_DONAT -p 2 -i %s -j ACCEPT 2>/dev/null
./bin/cms:216619:iptables -t nat -D PRE_SERVICE -d 224.0.0.0/4 -i %s -j ACCEPT 2>/dev/null
./bin/cms:216653:iptables -t nat -%c PRE_DONAT -i %s -p %s %s --dport %d -j DNAT --to %s 2>/dev/null
./bin/cms:216654:iptables -%c FWD_SERVICE -i %s -p %s %s -d %s --dport %d -j ACCEPT 2>/dev/null
./bin/cms:216656:iptables -t nat -%c PRE_DONAT -i br0 -p %s %s -d %s --dport %d -j DNAT --to %s
./bin/cms:216658:iptables -t nat -%c PRE_DONAT -i %s -p %s %s --dport %d:%d -j DNAT --to %s 2>/dev/null
./bin/cms:216660:iptables -t nat -%c PRE_DONAT -i br0 -p %s -d %s --dport %d:%d -j DNAT --to %s
./bin/cms:216662:iptables -t nat -%c PRE_DONAT -i %s -p %s %s --dport %d -j DNAT --to %s:%d 2>/dev/null
./bin/cms:216664:iptables -t nat -%c PRE_DONAT -i br0 -p %s -d %s --dport %d -j DNAT --to %s:%d
./bin/cms:216666:iptables -t nat -%c PRE_DONAT -i %s -p %s %s --dport %d:%d -j DNAT --to %s:%d 2>/dev/null
./bin/cms:216669:iptables -t nat -%c PRE_DONAT -i br0 -p %s -d %s --dport %d:%d -j DNAT --to %s:%d
./bin/cms:216672:iptables -t nat -%c PRE_DONAT -i %s -p %s %s --dport 4500:4500 -j DNAT --to %s:4500 2>/dev/null
./bin/cms:216673:iptables -%c FWD_SERVICE -i %s -p %s %s -d %s --dport 4500 -j ACCEPT 2>/dev/null
./bin/cms:216677:iptables -t nat -D PRE_DONAT -i %s -p %s %s --dport %d:%d -j DNAT --to %s:%d-%d 2>/dev/null
./bin/cms:216678:iptables -D FWD_SERVICE -i %s -p %s %s -d %s --dport %d:%d -j ACCEPT 2>/dev/null
./bin/cms:216682:iptables -t nat -D PRE_DONAT -i br0 -p %s %s -d %s --dport %d:%d -j DNAT --to %s:%d-%d 2>/dev/null
./bin/cms:216684:iptables -t nat -%c PRE_DONAT -i %s -p %s %s --dport %d:%d -j DNAT --to %s:%d-%d 2>/dev/null
./bin/cms:216688:iptables -%c FWD_SERVICE -i %s -p %s %s -d %s --dport %d:%d -j ACCEPT 2>/dev/null
./bin/cms:216691:iptables -t nat -%c PRE_DONAT -i br0 -p %s %s -d %s --dport %d:%d -j DNAT --to %s:%d-%d 2>/dev/null
./bin/cms:216692:iptables -t nat -D PRE_DONAT -i %s -p tcp --dport %d -j REDIRECT --to-ports %d 2>/dev/null
./bin/cms:216694:iptables -t nat -A PRE_DONAT -i %s -p tcp --dport %d -j REDIRECT --to-ports %d 2>/dev/null
./bin/cms:216696:iptables -%c FWD_SERVICE -o %s -p %s --dport %d -j PORT_TRIGGERING --triggering-type out --triggering-proto %s --triggering-port %d --open-port %s --open-proto tcp 2>/dev/null
./bin/cms:216697:iptables -%c FWD_SERVICE -o %s -p %s --dport %d -j PORT_TRIGGERING --triggering-type out --triggering-proto %s --triggering-port %d --open-port %s --open-proto udp 2>/dev/null
./bin/cms:216698:iptables -t nat -%c PREROUTING -i %s -j PORT_TRIGGERING --triggering-type dnat 2>/dev/null
./bin/cms:216700:iptables -%c FWD_SERVICE -i %s -j PORT_TRIGGERING --triggering-type in 2>/dev/null
./bin/cms:216702:iptables -t nat -%c PRE_REDIR -i %s -p %s --dport %s -j DNAT --to %s:%s,%s 2>/dev/null
./bin/cms:216704:iptables -t nat -%c PRE_REDIR -i %s -p %s --dport %s -j DNAT --to %s:%s 2>/dev/null
./bin/cms:216705:iptables -%c FWD_REDIR -i %s -p %s -d %s --dport %s -j ACCEPT 2>/dev/null
./bin/cms:216708:iptables -t nat -%c PRE_REDIR -i %s -p %s  --dport %s -j DNAT --to %s:%s 2>/dev/null
./bin/cms:218049:iptables -t mangle %s %s -p tcp --tcp-flags ACK ACK -m length --length %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:218054:ip6tables -t mangle %s %s -p tcp --tcp-flags ACK ACK -m length --length %s -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/cms:218058:iptables -t mangle -N FORWARD_WAN_RULES
./bin/cms:218059:iptables -t mangle -I FORWARD -i br0 -j FORWARD_WAN_RULES
./bin/cms:218062:ip6tables -t mangle -N FORWARD_WAN_RULES
./bin/cms:218066:ip6tables -t mangle -I FORWARD -i br0 -j FORWARD_WAN_RULES
./bin/cms:218078:iptables -t mangle -A %s -p UDP --dport 123 -m dscp --dscp 0x18 -j MARK --set-mark 0x%x/0x%x
./bin/cms:218082:iptables -t mangle -A %s -p UDP --dport 123 -m dscp --dscp 0x18 -j DSCP --set-dscp 0x%x
./bin/cms:218083:iptables -t mangle -A %s -p UDP --dport 123 -m dscp --dscp 0x%x -m mark --mark 0x%x/0x%x -j ACCEPT
./bin/cms:218085:iptables -t mangle -A %s -p TCP --dport 80 -m dscp --dscp 0x18 -j MARK --set-mark 0x%x/0x%x
./bin/cms:218086:iptables -t mangle -A %s -p TCP --dport 80 -m dscp --dscp 0x18 -j DSCP --set-dscp 0x%x
./bin/cms:218088:iptables -t mangle -A %s -p TCP --dport 80 -m dscp --dscp 0x%x -m mark --mark 0x%x/0x%x -j ACCEPT
./bin/cms:218091:iptables -t mangle -A %s -p UDP --dport 43962 -m dscp --dscp 0x18 -j MARK --set-mark 0x%x/0x%x
./bin/cms:218093:iptables -t mangle -A %s -p UDP --dport 43962 -m dscp --dscp 0x18 -j ACCEPT
./bin/cms:218094:iptables -t mangle -A %s -p UDP --dport 47806 -m dscp --dscp 0x18 -j MARK --set-mark 0x%x/0x%x
./bin/cms:218096:iptables -t mangle -A %s -p UDP --dport 47806 -m dscp --dscp 0x18 -j ACCEPT
./bin/cms:218097:iptables -t mangle -A OUTPUT -p udp --dport 53 -j MARK --set-mark 0x%x/0x%x
./bin/cms:218098:iptables -t mangle -I OUTPUT -m mark --mark 0x%x/0x%x -j MARK --set-mark 0/0x%x
./bin/cms:218099:ip6tables -t mangle -I OUTPUT -m mark --mark 0x%x/0x%x -j MARK --set-mark 0/0x%x
./bin/cms:218103:iptables -t mangle -A %s -j DSCP --set-dscp 0x0
./bin/cms:218104:ip6tables -t mangle -I OUTPUT -p 47 -m mark --mark 0x5/0x%x -j DSCP --set-dscp 0x30
./bin/cms:218105:ip6tables -t mangle -A %s -p UDP --dport 123 -m dscp --dscp 0x18 -j MARK --set-mark 0x%x/0x%x
./bin/cms:218108:ip6tables -t mangle -A %s -p UDP --dport 123 -m dscp --dscp 0x18 -j DSCP --set-dscp 0x%x
./bin/cms:218112:ip6tables -t mangle -A %s -p UDP --dport 123 -m dscp --dscp 0x%x -m mark --mark 0x%x/0x%x -j ACCEPT
./bin/cms:218113:ip6tables -t mangle -A %s -p TCP --dport 80 -m dscp --dscp 0x18 -j MARK --set-mark 0x%x/0x%x
./bin/cms:218117:ip6tables -t mangle -A %s -p TCP --dport 80 -m dscp --dscp 0x18 -j DSCP --set-dscp 0x%x
./bin/cms:218118:ip6tables -t mangle -A %s -p TCP --dport 80 -m dscp --dscp 0x%x -m mark --mark 0x%x/0x%x -j ACCEPT
./bin/cms:218120:ip6tables -t mangle -A %s -p UDP --dport 43962 -m dscp --dscp 0x18 -j MARK --set-mark 0x%x/0x%x
./bin/cms:218121:ip6tables -t mangle -A %s -p UDP --dport 43962 -m dscp --dscp 0x18 -j ACCEPT
./bin/cms:218125:ip6tables -t mangle -A %s -p UDP --dport 47806 -m dscp --dscp 0x18 -j MARK --set-mark 0x%x/0x%x
./bin/cms:218126:ip6tables -t mangle -A %s -p UDP --dport 47806 -m dscp --dscp 0x18 -j ACCEPT
./bin/cms:218130:ip6tables -t mangle -A POSTROUTING -p UDP --dport 5060 ! -o br+ -m mark  --mark 0x%x/0x%x -j DSCP --set-dscp 0x30
./bin/cms:218133:ip6tables -t mangle -A POSTROUTING -p UDP --dport 5060 ! -o br+ -m mark  --mark 0x%x/0x%x -j MARK --set-mark 0x%x/0x%x
./bin/cms:218135:ip6tables -t mangle -A OUTPUT -p udp --dport 53 -j MARK --set-mark 0x%x/0x%x
./bin/cms:218139:ip6tables -t mangle -A %s -j DSCP --set-dscp 0x0
./bin/cms:218144:iptables -t mangle -F %s
./bin/cms:218148:iptables -t mangle -X %s
./bin/cms:218152:ip6tables -t mangle -F %s
./bin/cms:218155:ip6tables -t mangle -X %s
./bin/cms:218748:ip6tables -t mangle -D ROUTE_CTL_LIST -d %s/%d -j RETURN 2>/dev/null
./bin/cms:218752:ip6tables -t mangle -I ROUTE_CTL_LIST -d %s/%d -j RETURN 2>/dev/null
./bin/cms:218785:ip6tables -t mangle -D ROUTE_CTL_LIST -d %s/%d -j RETURN 2>/dev/null 
./bin/cms:218788:ip6tables -t mangle -I ROUTE_CTL_LIST -d %s/%d -j RETURN 2>/dev/null 
./bin/cms:218820:ebtables -t nat -A PREROUTING -p IPV6 --logical-in %s --mark 0x00000000/0xff000000 -j mark --mark-or %s
./bin/cms:218828:ebtables -t nat -D PREROUTING -p IPV6 --logical-in %s --mark 0x00000000/0xff000000 -j mark --mark-or %s
./bin/cms:218838:iptables -t mangle -D ROUTE_STATIC_LIST -d %s/%d -j ACCEPT
./bin/cms:218847:iptables -t mangle -A ROUTE_STATIC_LIST -d %s/%d -j ACCEPT
./bin/cms:218981:ebtables -t nat %s PREROUTING -p IPV4 --logical-in %s --mark 0x00000000/0xff000000 -j mark --mark-or %s
./bin/cms:218998:iptables -t mangle -D ROUTE_CTL_LIST -d %s -j RETURN 2>/dev/null
./bin/cms:219002:iptables -t mangle -I ROUTE_CTL_LIST -d %s -j RETURN 2>/dev/null
./bin/cms:221214:ebtables -t nat -D POSTROUTING --out-if %s -p IPV4 -j wmm-mark
./bin/cms:221216:ebtables -t nat -D POSTROUTING --out-if %s -p 802_1Q -j wmm-mark --wmm-marktag vlan
./bin/cms:221217:ebtables -t nat -D PREROUTING -p ARP -i %s -j wlroaming >/dev/null
./bin/cms:221219:ebtables -t nat -A PREROUTING -p ARP -i %s -j wlroaming >/dev/null
./bin/cms:221221:ebtables -t nat -A POSTROUTING --out-if %s -p IPV4 -j wmm-mark
./bin/cms:221223:ebtables -t nat -A POSTROUTING --out-if %s -p 802_1Q -j wmm-mark --wmm-marktag vlan
./bin/dns:17432:iptables -t filter -%c %s -d %s -j ACCEPT 2>/dev/null
./bin/dns:17435:ip6tables -t filter -%c %s -d %s -j ACCEPT 2>/dev/null
./bin/dns:17437:iptables -t mangle -%c FWD_FILTER_LIST -d %s/%d -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/dns:17441:ip6tables -t mangle -%c FWD_FILTER_LIST -d %s/%d -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/dns:17444:iptables -t mangle -%c FWD_FILTER_LIST -p udp -d %s/%d --dport %d -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/dns:17446:iptables -t mangle -%c FWD_FILTER_LIST -p tcp -d %s/%d --dport %d -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/dns:17448:ip6tables -t mangle -%c FWD_FILTER_LIST -p udp -d %s/%d --dport %d -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/dns:17449:ip6tables -t mangle -%c FWD_FILTER_LIST -p tcp -d %s/%d --dport %d -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/mic:7857:iptables -I INPUT_FIREWALL -i br0 -p tcp --ipv4 ! -d %s --dport 80 -j DROP
./bin/mic:7879:iptables -F
./bin/mic:7953:iptables -I INPUT -p tcp --dport %d -j ACCEPT
./bin/mic:7956:iptables -I INPUT -p udp -d %s --dport %d -j ACCEPT
./bin/mic:7957:iptables -I INPUT -p udp ! -i in_0 --dport %d -j DROP
./bin/mld:8930:ip6tables -%c FORWARD --dst %s -i %s -j ACCEPT
./bin/mld:8932:ip6tables -%c INPUT --dst %s -i %s -j ACCEPT
./bin/web:40700:iptables -t mangle -D ROUTE_STATIC_LIST -d %s/%d -j ACCEPT
./bin/web:40732:iptables -t mangle -A ROUTE_STATIC_LIST -d %s/%d -j ACCEPT
./bin/web:40832:iptables -D INPUT_SERVICE -i %s -p icmp --icmp-type 8 -j DROP 2> /dev/null
./bin/web:40834:iptables -D INPUT_SERVICE -i %s -p icmp --icmp-type 8 -j ACCEPT 2> /dev/null
./bin/web:40838:iptables -I INPUT_SERVICE -i %s -p icmp --icmp-type 8 -j ACCEPT 2> /dev/null
./bin/web:40932:iptables -t mangle -D OUTPUT -m mark --mark 0x%x/0x%x -j MARK --set-mark 0/0x%x 2>/dev/null
./bin/web:40933:ip6tables -t mangle -D OUTPUT -m mark --mark 0x%x/0x%x -j MARK --set-mark 0/0x%x 2>/dev/null
./bin/web:40937:iptables -t mangle -I OUTPUT -m mark --mark 0x%x/0x%x -j DSCP --set-dscp 0x%x
./bin/web:40940:iptables -t mangle -I OUTPUT 2 -m mark --mark 0x%x/0x%x -j MARK --set-mark 0x%x/0x%x
./bin/web:40944:ip6tables -t mangle -I OUTPUT -m mark --mark 0x%x/0x%x -j DSCP --set-dscp 0x%x
./bin/web:40946:ip6tables -t mangle -I OUTPUT 2 -m mark --mark 0x%x/0x%x -j MARK --set-mark 0x%x/0x%x
./bin/web:40949:iptables -t mangle -D OUTPUT -m mark --mark 0x%x/0x%x -j DSCP --set-dscp 0x%x 2>/dev/null
./bin/web:40952:iptables -t mangle -D OUTPUT -m mark --mark 0x%x/0x%x -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/web:40954:ip6tables -t mangle -D OUTPUT -m mark --mark 0x%x/0x%x -j DSCP --set-dscp 0x%x 2>/dev/null
./bin/web:40956:ip6tables -t mangle -D OUTPUT -m mark --mark 0x%x/0x%x -j MARK --set-mark 0x%x/0x%x 2>/dev/null
./bin/web:40957:iptables -t mangle -I OUTPUT -m mark --mark 0x%x/0x%x -j MARK --set-mark 0/0x%x
./bin/web:40958:ip6tables -t mangle -I OUTPUT -m mark --mark 0x%x/0x%x -j MARK --set-mark 0/0x%x
./bin/igmp:9235:iptables -t filter -I FWD_SERVICE 1 -i %s -d %s -j DROP 2>/dev/null
./bin/igmp:9236:iptables -t filter -D FWD_SERVICE -i %s -d %s -j ACCEPT 2>/dev/null
./bin/console:24585:ip6tables -F
./bin/console:25189:ebtables -F
./bin/console:25245:iptables -t nat -I PREROUTING -i in_0 -s 172.10.10.1 -d 172.10.10.10 -p udp --dport 20253 -j DNAT --to 192.168.2.100
./bin/console:25249:iptables -t nat -I PREROUTING -i in_0 -s 172.10.10.1 -d 172.10.10.10 -p udp --dport 20248 -j DNAT --to 192.168.2.100
./bin/console:25253:iptables -t nat -I PREROUTING -i in_0 -s 172.10.10.1 -d 172.10.10.10 -p udp --dport 20249 -j DNAT --to 192.168.2.100
./bin/console:25257:iptables -t nat -D PREROUTING -i in_0 -s 172.10.10.1 -d 172.10.10.10 -p udp --dport 20253 -j DNAT --to 192.168.2.100
./bin/console:25261:iptables -t nat -D PREROUTING -i in_0 -s 172.10.10.1 -d 172.10.10.10 -p udp --dport 20248 -j DNAT --to 192.168.2.100
./bin/console:25265:iptables -t nat -D PREROUTING -i in_0 -s 172.10.10.1 -d 172.10.10.10 -p udp --dport 20249 -j DNAT --to 192.168.2.100
./bin/console:25871:ip6tables -L -v
./bin/console:26106:ebtables -D FWD_PPPOE -j DROP
./bin/bftpd:17824:iptables -t nat -F PRE_FTP
./bin/bftpd:17826:iptables -t filter -F INPUT_FTP
./bin/bftpd:17827:ip6tables -t filter -F INPUT_FTP
./bin/dhcpc:8350:iptables -t mangle -D ROUTE_OPTION121_LIST -d %s/%s -j ACCEPT 2> /dev/null
./bin/dhcpc:8375:iptables -t mangle -D ROUTE_OPTION121_LIST -d %s/%s -j ACCEPT
./bin/dhcpc:8378:iptables -t mangle -I ROUTE_OPTION121_LIST -d %s/%s -j ACCEPT
./bin/siproxd:101978:iptables -t nat -%c PREROUTING -i %s -p udp --dport %d -j ACCEPT
./bin/siproxd:101982:iptables -%c INPUT_SERVICE -i %s -p udp --dport %d -j ACCEPT
./bin/abusecmd:4339:iptables -t filter -D %s -d %s -j ACCEPT 2>/dev/null
./bin/abusecmd:4343:iptables -t filter -A %s -d %s -j ACCEPT 2>/dev/null
./bin/abusecmd:4347:ip6tables -t filter -D %s -d %s -j ACCEPT 2>/dev/null
./bin/abusecmd:4350:ip6tables -t filter -A %s -d %s -j ACCEPT 2>/dev/null
./bin/abusecmd:4353:iptables -t filter -F FWD_ABUSE_USR 2>/dev/null
./bin/abusecmd:4354:ip6tables -t filter -F FWD_ABUSE_USR 2>/dev/null
./bin/abusecmd:4415:iptables -t filter -D FWD_ABUSE -m limit --limit 1/m -j LOG --log-level 1 2>/dev/null
./bin/abusecmd:4418:iptables -t filter -A FWD_ABUSE -m limit --limit 1/m -j LOG --log-level 1 2>/dev/null
./bin/abusecmd:4421:iptables -t filter -D FWD_ABUSE -j DROP 2>/dev/null
./bin/abusecmd:4422:iptables -t filter -A FWD_ABUSE -j DROP 2>/dev/null
./bin/abusecmd:4423:ip6tables -t filter -D FWD_ABUSE -m limit --limit 1/m -j LOG --log-level 1 2>/dev/null
./bin/abusecmd:4425:ip6tables -t filter -A FWD_ABUSE -m limit --limit 1/m -j LOG --log-level 1 2>/dev/null
./bin/abusecmd:4427:ip6tables -t filter -D FWD_ABUSE -j DROP 2>/dev/null
./bin/abusecmd:4431:ip6tables -t filter -A FWD_ABUSE -j DROP 2>/dev/null
./bin/hybrid:22869:iptables -t mangle -D PREROUTING -p tcp --tcp-flags SYN,ACK,RST SYN -m tcpmss --mss %d: -i %s -j TCPMSS --set-mss %d 2>/dev/null
./bin/hybrid:22873:iptables -t mangle -D POSTROUTING -p tcp --tcp-flags SYN,ACK,RST SYN -m tcpmss --mss %d: -o %s -j TCPMSS --set-mss %d 2>/dev/null
./bin/hybrid:22876:iptables -t mangle -D PREROUTING -p tcp --tcp-flags SYN,ACK,RST SYN,ACK -m tcpmss --mss %d: -i %s -j TCPMSS --set-mss %d 2>/dev/null
./bin/hybrid:22880:iptables -t mangle -D POSTROUTING -p tcp --tcp-flags SYN,ACK,RST SYN,ACK -m tcpmss --mss %d: -o %s -j TCPMSS --set-mss %d 2>/dev/null
./bin/hybrid:22883:iptables -t mangle -A PREROUTING -p tcp --tcp-flags SYN,ACK,RST SYN -m tcpmss --mss %d: -i %s -j TCPMSS --set-mss %d
./bin/hybrid:22887:iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,ACK,RST SYN -m tcpmss --mss %d: -o %s -j TCPMSS --set-mss %d
./bin/hybrid:22890:iptables -t mangle -A PREROUTING -p tcp --tcp-flags SYN,ACK,RST SYN,ACK -m tcpmss --mss %d: -i %s -j TCPMSS --set-mss %d
./bin/hybrid:22894:iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,ACK,RST SYN,ACK -m tcpmss --mss %d: -o %s -j TCPMSS --set-mss %d
./bin/hybrid:22897:ip6tables -t mangle -D PREROUTING -p tcp --tcp-flags SYN,ACK,RST SYN -m tcpmss --mss %d: -i %s -j TCPMSS --set-mss %d 2>/dev/null
./bin/hybrid:22900:ip6tables -t mangle -D POSTROUTING -p tcp --tcp-flags SYN,ACK,RST SYN -m tcpmss --mss %d: -o %s -j TCPMSS --set-mss %d 2>/dev/null
./bin/hybrid:22902:ip6tables -t mangle -D PREROUTING -p tcp --tcp-flags SYN,ACK,RST SYN,ACK -m tcpmss --mss %d: -i %s -j TCPMSS --set-mss %d 2>/dev/null
./bin/hybrid:22905:ip6tables -t mangle -D POSTROUTING -p tcp --tcp-flags SYN,ACK,RST SYN,ACK -m tcpmss --mss %d: -o %s -j TCPMSS --set-mss %d 2>/dev/null
./bin/hybrid:22907:ip6tables -t mangle -A PREROUTING -p tcp --tcp-flags SYN,ACK,RST SYN -m tcpmss --mss %d: -i %s -j TCPMSS --set-mss %d
./bin/hybrid:22910:ip6tables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,ACK,RST SYN -m tcpmss --mss %d: -o %s -j TCPMSS --set-mss %d
./bin/hybrid:22912:ip6tables -t mangle -A PREROUTING -p tcp --tcp-flags SYN,ACK,RST SYN,ACK -m tcpmss --mss %d: -i %s -j TCPMSS --set-mss %d
./bin/hybrid:22915:ip6tables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,ACK,RST SYN,ACK -m tcpmss --mss %d: -o %s -j TCPMSS --set-mss %d
./bin/hybrid:22955:iptables -t nat -D POSTROUTING -o %s -j MASQUERADE --mode fullcone 2>/dev/null
./bin/hybrid:22957:iptables -t nat -D POSTROUTING -s %s/%s -o %s -j MASQUERADE --mode fullcone 2>/dev/null
./bin/hybrid:22958:iptables -t nat -I POSTROUTING -s %s/%s -o %s -j MASQUERADE --mode fullcone