API tools faq
paste
cmh714

iptables rules

cmh714
Aug 14th, 2018
530
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 80.24 KB | None | 0 0
raw download clone embed print report
  1. ************************ALLOWED RULES - iptables -L ******************************************
  2.  
  3. Chain INPUT (policy ACCEPT)
  4. target prot opt source destination
  5. nm_mdmprxy_doze_mode_skip all -- anywhere anywhere
  6. bw_INPUT all -- anywhere anywhere
  7. fw_INPUT all -- anywhere anywhere
  8.  
  9. Chain FORWARD (policy ACCEPT)
  10. target prot opt source destination
  11. nm_mdmprxy_iface_pkt_fwder all -- anywhere anywhere
  12. oem_fwd all -- anywhere anywhere
  13. fw_FORWARD all -- anywhere anywhere
  14. bw_FORWARD all -- anywhere anywhere
  15. tetherctrl_FORWARD all -- anywhere anywhere
  16.  
  17. Chain OUTPUT (policy ACCEPT)
  18. target prot opt source destination
  19. afwall all -- anywhere anywhere
  20. nm_mdmprxy_doze_mode_skip all -- anywhere anywhere
  21. DROP udp -- anywhere anywhere udp dpt:1900
  22. DROP udp -- anywhere anywhere udp dpt:1900
  23. DROP udp -- anywhere anywhere udp dpt:1900
  24. DROP udp -- anywhere anywhere udp dpt:1900
  25. DROP udp -- anywhere anywhere udp dpt:1900
  26. DROP udp -- anywhere anywhere udp dpt:1900
  27. DROP udp -- anywhere anywhere udp dpt:1900
  28. DROP udp -- anywhere anywhere udp dpt:1900
  29. DROP udp -- anywhere anywhere udp dpt:1900
  30. DROP udp -- anywhere anywhere udp dpt:1900
  31. DROP udp -- anywhere anywhere udp dpt:1900
  32. DROP udp -- anywhere anywhere udp dpt:1900
  33. DROP udp -- anywhere anywhere udp dpt:1900
  34. DROP udp -- anywhere anywhere udp dpt:1900
  35. DROP udp -- anywhere anywhere udp dpt:1900
  36. DROP udp -- anywhere anywhere udp dpt:1900
  37. DROP udp -- anywhere anywhere udp dpt:1900
  38. oem_out all -- anywhere anywhere
  39. fw_OUTPUT all -- anywhere anywhere
  40. st_OUTPUT all -- anywhere anywhere
  41. bw_OUTPUT all -- anywhere anywhere
  42.  
  43. Chain afwall (1 references)
  44. target prot opt source destination
  45. afwall-wifi all -- anywhere anywhere
  46. afwall-wifi all -- anywhere anywhere
  47. afwall-wifi all -- anywhere anywhere
  48. afwall-wifi all -- anywhere anywhere
  49. afwall-wifi all -- anywhere anywhere
  50. afwall-3g all -- anywhere anywhere
  51. afwall-3g all -- anywhere anywhere
  52. afwall-3g all -- anywhere anywhere
  53. afwall-3g all -- anywhere anywhere
  54. afwall-3g all -- anywhere anywhere
  55. afwall-3g all -- anywhere anywhere
  56. afwall-3g all -- anywhere anywhere
  57. afwall-3g all -- anywhere anywhere
  58. afwall-3g all -- anywhere anywhere
  59. afwall-3g all -- anywhere anywhere
  60. afwall-3g all -- anywhere anywhere
  61. afwall-3g all -- anywhere anywhere
  62. afwall-3g all -- anywhere anywhere
  63. afwall-3g all -- anywhere anywhere
  64. afwall-3g all -- anywhere anywhere
  65. afwall-3g all -- anywhere anywhere
  66. afwall-3g all -- anywhere anywhere
  67. afwall-3g all -- anywhere anywhere
  68. afwall-3g all -- anywhere anywhere
  69. afwall-3g all -- anywhere anywhere
  70. afwall-3g all -- anywhere anywhere
  71. afwall-3g all -- anywhere anywhere
  72. afwall-3g all -- anywhere anywhere
  73. afwall-3g all -- anywhere anywhere
  74. afwall-3g all -- anywhere anywhere
  75.  
  76. Chain afwall-3g (25 references)
  77. target prot opt source destination
  78. afwall-3g-postcustom all -- anywhere anywhere
  79.  
  80. Chain afwall-3g-fork (2 references)
  81. target prot opt source destination
  82. afwall-3g-home all -- anywhere anywhere
  83.  
  84. Chain afwall-3g-home (1 references)
  85. target prot opt source destination
  86. RETURN all -- anywhere anywhere owner UID match root
  87. RETURN all -- anywhere anywhere owner UID match system
  88. RETURN all -- anywhere anywhere owner UID match radio
  89. RETURN all -- anywhere anywhere owner UID match vpn
  90. RETURN all -- anywhere anywhere owner UID match gps
  91. RETURN all -- anywhere anywhere owner UID match u0_a4
  92. RETURN all -- anywhere anywhere owner UID match u0_a16
  93. RETURN all -- anywhere anywhere owner UID match u0_a19
  94. RETURN all -- anywhere anywhere owner UID match u0_a20
  95. RETURN all -- anywhere anywhere owner UID match u0_a23
  96. RETURN all -- anywhere anywhere owner UID match u0_a28
  97. RETURN all -- anywhere anywhere owner UID match u0_a34
  98. RETURN all -- anywhere anywhere owner UID match u0_a36
  99. RETURN all -- anywhere anywhere owner UID match u0_a45
  100. RETURN all -- anywhere anywhere owner UID match u0_a46
  101. RETURN all -- anywhere anywhere owner UID match u0_a48
  102. RETURN all -- anywhere anywhere owner UID match u0_a52
  103. RETURN all -- anywhere anywhere owner UID match u0_a63
  104. RETURN all -- anywhere anywhere owner UID match u0_a65
  105. RETURN all -- anywhere anywhere owner UID match u0_a69
  106. RETURN all -- anywhere anywhere owner UID match u0_a70
  107. RETURN all -- anywhere anywhere owner UID match u0_a80
  108. RETURN all -- anywhere anywhere owner UID match u0_a82
  109. RETURN all -- anywhere anywhere owner UID match u0_a89
  110. RETURN all -- anywhere anywhere owner UID match u0_a90
  111. RETURN all -- anywhere anywhere owner UID match u0_a100
  112. RETURN all -- anywhere anywhere owner UID match u0_a103
  113. RETURN all -- anywhere anywhere owner UID match u0_a105
  114. RETURN all -- anywhere anywhere owner UID match u0_a112
  115. RETURN all -- anywhere anywhere owner UID match u0_a113
  116. RETURN all -- anywhere anywhere owner UID match u0_a116
  117. RETURN all -- anywhere anywhere owner UID match u0_a118
  118. RETURN all -- anywhere anywhere owner UID match u0_a121
  119. RETURN all -- anywhere anywhere owner UID match u0_a127
  120. RETURN all -- anywhere anywhere owner UID match u0_a128
  121. RETURN all -- anywhere anywhere owner UID match u0_a129
  122. RETURN all -- anywhere anywhere owner UID match u0_a130
  123. RETURN all -- anywhere anywhere owner UID match u0_a131
  124. RETURN all -- anywhere anywhere owner UID match u0_a132
  125. RETURN all -- anywhere anywhere owner UID match u0_a134
  126. RETURN all -- anywhere anywhere owner UID match u0_a135
  127. RETURN all -- anywhere anywhere owner UID match u0_a137
  128. RETURN all -- anywhere anywhere owner UID match u0_a138
  129. RETURN all -- anywhere anywhere owner UID match u0_a139
  130. RETURN all -- anywhere anywhere owner UID match u0_a140
  131. RETURN all -- anywhere anywhere owner UID match u0_a143
  132. RETURN all -- anywhere anywhere owner UID match u0_a144
  133. RETURN all -- anywhere anywhere owner UID match u0_a146
  134. RETURN all -- anywhere anywhere owner UID match u0_a147
  135. RETURN all -- anywhere anywhere owner UID match u0_a150
  136. RETURN all -- anywhere anywhere owner UID match u0_a153
  137. RETURN all -- anywhere anywhere owner UID match u0_a156
  138. RETURN all -- anywhere anywhere owner UID match u0_a157
  139. RETURN all -- anywhere anywhere owner UID match u0_a158
  140. RETURN all -- anywhere anywhere owner UID match u0_a159
  141. RETURN all -- anywhere anywhere owner UID match u0_a161
  142. RETURN all -- anywhere anywhere owner UID match u0_a162
  143. RETURN all -- anywhere anywhere owner UID match u0_a166
  144. RETURN all -- anywhere anywhere owner UID match u0_a168
  145. RETURN all -- anywhere anywhere owner UID match u0_a171
  146. RETURN all -- anywhere anywhere owner UID match u0_a172
  147. RETURN all -- anywhere anywhere owner UID match u0_a174
  148. RETURN all -- anywhere anywhere owner UID match u0_a177
  149. RETURN all -- anywhere anywhere owner UID match u0_a179
  150. RETURN all -- anywhere anywhere owner UID match u0_a181
  151. RETURN all -- anywhere anywhere owner UID match u0_a182
  152. RETURN all -- anywhere anywhere owner UID match u0_a184
  153. RETURN all -- anywhere anywhere owner UID match u0_a185
  154. RETURN all -- anywhere anywhere owner UID match u0_a187
  155. RETURN all -- anywhere anywhere owner UID match u0_a189
  156. RETURN all -- anywhere anywhere owner UID match u0_a190
  157. RETURN all -- anywhere anywhere owner UID match u0_a191
  158. RETURN all -- anywhere anywhere owner UID match u0_a192
  159. RETURN all -- anywhere anywhere owner UID match u0_a193
  160. RETURN all -- anywhere anywhere owner UID match u0_a194
  161. RETURN all -- anywhere anywhere owner UID match u0_a198
  162. RETURN all -- anywhere anywhere owner UID match u0_a200
  163. RETURN all -- anywhere anywhere owner UID match u0_a201
  164. RETURN all -- anywhere anywhere owner UID match u0_a202
  165. RETURN all -- anywhere anywhere owner UID match u0_a203
  166. RETURN all -- anywhere anywhere owner UID match u0_a205
  167. RETURN all -- anywhere anywhere owner UID match u0_a206
  168. RETURN all -- anywhere anywhere owner UID match u0_a207
  169. RETURN all -- anywhere anywhere owner UID match u0_a211
  170. RETURN all -- anywhere anywhere owner UID match u0_a212
  171. RETURN all -- anywhere anywhere owner UID match u0_a213
  172. RETURN all -- anywhere anywhere owner UID match u0_a214
  173. RETURN all -- anywhere anywhere owner UID match u0_a215
  174. RETURN all -- anywhere anywhere owner UID match u0_a216
  175. RETURN all -- anywhere anywhere owner UID match u0_a218
  176. RETURN all -- anywhere anywhere owner UID match u0_a220
  177. RETURN all -- anywhere anywhere owner UID match u0_a221
  178. RETURN all -- anywhere anywhere owner UID match u0_a223
  179. RETURN all -- anywhere anywhere owner UID match u0_a224
  180. RETURN all -- anywhere anywhere owner UID match u0_a225
  181. RETURN all -- anywhere anywhere owner UID match u0_a227
  182. RETURN all -- anywhere anywhere owner UID match u0_a228
  183. RETURN all -- anywhere anywhere owner UID match u0_a232
  184. RETURN all -- anywhere anywhere owner UID match u0_a235
  185. RETURN all -- anywhere anywhere owner UID match u0_a236
  186. RETURN all -- anywhere anywhere owner UID match u0_a239
  187. RETURN all -- anywhere anywhere owner UID match u0_a244
  188. RETURN all -- anywhere anywhere owner UID match u0_a245
  189. RETURN all -- anywhere anywhere owner UID match u0_a246
  190. RETURN all -- anywhere anywhere owner UID match u0_a248
  191. RETURN all -- anywhere anywhere owner UID match u0_a251
  192. RETURN all -- anywhere anywhere owner UID match u0_a252
  193. RETURN all -- anywhere anywhere owner UID match u0_a253
  194. RETURN all -- anywhere anywhere owner UID match u0_a254
  195. RETURN all -- anywhere anywhere owner UID match u0_a255
  196. RETURN all -- anywhere anywhere owner UID match u0_a260
  197. RETURN all -- anywhere anywhere owner UID match u0_a269
  198. RETURN all -- anywhere anywhere owner UID match u0_a271
  199. RETURN udp -- anywhere anywhere udp dpt:domain owner UID match root
  200. RETURN udp -- anywhere anywhere udp dpt:ntp owner UID match system
  201. afwall-reject all -- anywhere anywhere owner UID match 0-999999999
  202.  
  203. Chain afwall-3g-postcustom (1 references)
  204. target prot opt source destination
  205. afwall-3g-fork all -- anywhere anywhere
  206.  
  207. Chain afwall-3g-roam (0 references)
  208. target prot opt source destination
  209. RETURN udp -- anywhere anywhere udp dpt:domain owner UID match root
  210. afwall-reject all -- anywhere anywhere
  211.  
  212. Chain afwall-3g-tether (0 references)
  213. target prot opt source destination
  214. afwall-3g-fork all -- anywhere anywhere
  215.  
  216. Chain afwall-reject (5 references)
  217. target prot opt source destination
  218. NFLOG all -- anywhere anywhere nflog-prefix "{AFL}" nflog-group 40
  219. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  220.  
  221. Chain afwall-vpn (0 references)
  222. target prot opt source destination
  223. RETURN udp -- anywhere anywhere udp dpt:domain owner UID match root
  224. afwall-reject all -- anywhere anywhere
  225.  
  226. Chain afwall-wifi (5 references)
  227. target prot opt source destination
  228. afwall-wifi-postcustom all -- anywhere anywhere
  229.  
  230. Chain afwall-wifi-fork (2 references)
  231. target prot opt source destination
  232. afwall-wifi-wan all -- anywhere anywhere
  233.  
  234. Chain afwall-wifi-lan (0 references)
  235. target prot opt source destination
  236. RETURN udp -- anywhere anywhere udp dpt:domain
  237. RETURN udp -- anywhere anywhere udp dpt:domain owner UID match root
  238. afwall-reject all -- anywhere anywhere
  239.  
  240. Chain afwall-wifi-postcustom (1 references)
  241. target prot opt source destination
  242. RETURN all -- anywhere anywhere owner UID match dhcp
  243. RETURN all -- anywhere anywhere owner UID match wifi
  244. afwall-wifi-fork all -- anywhere anywhere
  245.  
  246. Chain afwall-wifi-tether (0 references)
  247. target prot opt source destination
  248. afwall-wifi-fork all -- anywhere anywhere
  249.  
  250. Chain afwall-wifi-wan (1 references)
  251. target prot opt source destination
  252. RETURN all -- anywhere anywhere owner UID match root
  253. RETURN all -- anywhere anywhere owner UID match system
  254. RETURN all -- anywhere anywhere owner UID match radio
  255. RETURN all -- anywhere anywhere owner UID match vpn
  256. RETURN all -- anywhere anywhere owner UID match gps
  257. RETURN all -- anywhere anywhere owner UID match u0_a4
  258. RETURN all -- anywhere anywhere owner UID match u0_a16
  259. RETURN all -- anywhere anywhere owner UID match u0_a19
  260. RETURN all -- anywhere anywhere owner UID match u0_a20
  261. RETURN all -- anywhere anywhere owner UID match u0_a22
  262. RETURN all -- anywhere anywhere owner UID match u0_a23
  263. RETURN all -- anywhere anywhere owner UID match u0_a28
  264. RETURN all -- anywhere anywhere owner UID match u0_a34
  265. RETURN all -- anywhere anywhere owner UID match u0_a36
  266. RETURN all -- anywhere anywhere owner UID match u0_a45
  267. RETURN all -- anywhere anywhere owner UID match u0_a46
  268. RETURN all -- anywhere anywhere owner UID match u0_a48
  269. RETURN all -- anywhere anywhere owner UID match u0_a52
  270. RETURN all -- anywhere anywhere owner UID match u0_a63
  271. RETURN all -- anywhere anywhere owner UID match u0_a65
  272. RETURN all -- anywhere anywhere owner UID match u0_a69
  273. RETURN all -- anywhere anywhere owner UID match u0_a70
  274. RETURN all -- anywhere anywhere owner UID match u0_a72
  275. RETURN all -- anywhere anywhere owner UID match u0_a80
  276. RETURN all -- anywhere anywhere owner UID match u0_a82
  277. RETURN all -- anywhere anywhere owner UID match u0_a89
  278. RETURN all -- anywhere anywhere owner UID match u0_a90
  279. RETURN all -- anywhere anywhere owner UID match u0_a91
  280. RETURN all -- anywhere anywhere owner UID match u0_a100
  281. RETURN all -- anywhere anywhere owner UID match u0_a103
  282. RETURN all -- anywhere anywhere owner UID match u0_a105
  283. RETURN all -- anywhere anywhere owner UID match u0_a112
  284. RETURN all -- anywhere anywhere owner UID match u0_a113
  285. RETURN all -- anywhere anywhere owner UID match u0_a116
  286. RETURN all -- anywhere anywhere owner UID match u0_a118
  287. RETURN all -- anywhere anywhere owner UID match u0_a121
  288. RETURN all -- anywhere anywhere owner UID match u0_a127
  289. RETURN all -- anywhere anywhere owner UID match u0_a128
  290. RETURN all -- anywhere anywhere owner UID match u0_a129
  291. RETURN all -- anywhere anywhere owner UID match u0_a130
  292. RETURN all -- anywhere anywhere owner UID match u0_a131
  293. RETURN all -- anywhere anywhere owner UID match u0_a132
  294. RETURN all -- anywhere anywhere owner UID match u0_a134
  295. RETURN all -- anywhere anywhere owner UID match u0_a135
  296. RETURN all -- anywhere anywhere owner UID match u0_a137
  297. RETURN all -- anywhere anywhere owner UID match u0_a138
  298. RETURN all -- anywhere anywhere owner UID match u0_a139
  299. RETURN all -- anywhere anywhere owner UID match u0_a140
  300. RETURN all -- anywhere anywhere owner UID match u0_a141
  301. RETURN all -- anywhere anywhere owner UID match u0_a142
  302. RETURN all -- anywhere anywhere owner UID match u0_a143
  303. RETURN all -- anywhere anywhere owner UID match u0_a144
  304. RETURN all -- anywhere anywhere owner UID match u0_a146
  305. RETURN all -- anywhere anywhere owner UID match u0_a147
  306. RETURN all -- anywhere anywhere owner UID match u0_a149
  307. RETURN all -- anywhere anywhere owner UID match u0_a150
  308. RETURN all -- anywhere anywhere owner UID match u0_a153
  309. RETURN all -- anywhere anywhere owner UID match u0_a154
  310. RETURN all -- anywhere anywhere owner UID match u0_a155
  311. RETURN all -- anywhere anywhere owner UID match u0_a156
  312. RETURN all -- anywhere anywhere owner UID match u0_a157
  313. RETURN all -- anywhere anywhere owner UID match u0_a158
  314. RETURN all -- anywhere anywhere owner UID match u0_a159
  315. RETURN all -- anywhere anywhere owner UID match u0_a160
  316. RETURN all -- anywhere anywhere owner UID match u0_a161
  317. RETURN all -- anywhere anywhere owner UID match u0_a162
  318. RETURN all -- anywhere anywhere owner UID match u0_a166
  319. RETURN all -- anywhere anywhere owner UID match u0_a167
  320. RETURN all -- anywhere anywhere owner UID match u0_a168
  321. RETURN all -- anywhere anywhere owner UID match u0_a171
  322. RETURN all -- anywhere anywhere owner UID match u0_a172
  323. RETURN all -- anywhere anywhere owner UID match u0_a174
  324. RETURN all -- anywhere anywhere owner UID match u0_a175
  325. RETURN all -- anywhere anywhere owner UID match u0_a176
  326. RETURN all -- anywhere anywhere owner UID match u0_a177
  327. RETURN all -- anywhere anywhere owner UID match u0_a179
  328. RETURN all -- anywhere anywhere owner UID match u0_a181
  329. RETURN all -- anywhere anywhere owner UID match u0_a182
  330. RETURN all -- anywhere anywhere owner UID match u0_a184
  331. RETURN all -- anywhere anywhere owner UID match u0_a185
  332. RETURN all -- anywhere anywhere owner UID match u0_a186
  333. RETURN all -- anywhere anywhere owner UID match u0_a187
  334. RETURN all -- anywhere anywhere owner UID match u0_a188
  335. RETURN all -- anywhere anywhere owner UID match u0_a189
  336. RETURN all -- anywhere anywhere owner UID match u0_a190
  337. RETURN all -- anywhere anywhere owner UID match u0_a191
  338. RETURN all -- anywhere anywhere owner UID match u0_a192
  339. RETURN all -- anywhere anywhere owner UID match u0_a193
  340. RETURN all -- anywhere anywhere owner UID match u0_a194
  341. RETURN all -- anywhere anywhere owner UID match u0_a195
  342. RETURN all -- anywhere anywhere owner UID match u0_a198
  343. RETURN all -- anywhere anywhere owner UID match u0_a199
  344. RETURN all -- anywhere anywhere owner UID match u0_a200
  345. RETURN all -- anywhere anywhere owner UID match u0_a201
  346. RETURN all -- anywhere anywhere owner UID match u0_a202
  347. RETURN all -- anywhere anywhere owner UID match u0_a203
  348. RETURN all -- anywhere anywhere owner UID match u0_a204
  349. RETURN all -- anywhere anywhere owner UID match u0_a205
  350. RETURN all -- anywhere anywhere owner UID match u0_a206
  351. RETURN all -- anywhere anywhere owner UID match u0_a207
  352. RETURN all -- anywhere anywhere owner UID match u0_a208
  353. RETURN all -- anywhere anywhere owner UID match u0_a210
  354. RETURN all -- anywhere anywhere owner UID match u0_a211
  355. RETURN all -- anywhere anywhere owner UID match u0_a212
  356. RETURN all -- anywhere anywhere owner UID match u0_a213
  357. RETURN all -- anywhere anywhere owner UID match u0_a214
  358. RETURN all -- anywhere anywhere owner UID match u0_a215
  359. RETURN all -- anywhere anywhere owner UID match u0_a216
  360. RETURN all -- anywhere anywhere owner UID match u0_a218
  361. RETURN all -- anywhere anywhere owner UID match u0_a220
  362. RETURN all -- anywhere anywhere owner UID match u0_a221
  363. RETURN all -- anywhere anywhere owner UID match u0_a223
  364. RETURN all -- anywhere anywhere owner UID match u0_a224
  365. RETURN all -- anywhere anywhere owner UID match u0_a225
  366. RETURN all -- anywhere anywhere owner UID match u0_a227
  367. RETURN all -- anywhere anywhere owner UID match u0_a228
  368. RETURN all -- anywhere anywhere owner UID match u0_a232
  369. RETURN all -- anywhere anywhere owner UID match u0_a233
  370. RETURN all -- anywhere anywhere owner UID match u0_a234
  371. RETURN all -- anywhere anywhere owner UID match u0_a235
  372. RETURN all -- anywhere anywhere owner UID match u0_a236
  373. RETURN all -- anywhere anywhere owner UID match u0_a239
  374. RETURN all -- anywhere anywhere owner UID match u0_a244
  375. RETURN all -- anywhere anywhere owner UID match u0_a245
  376. RETURN all -- anywhere anywhere owner UID match u0_a246
  377. RETURN all -- anywhere anywhere owner UID match u0_a248
  378. RETURN all -- anywhere anywhere owner UID match u0_a251
  379. RETURN all -- anywhere anywhere owner UID match u0_a252
  380. RETURN all -- anywhere anywhere owner UID match u0_a253
  381. RETURN all -- anywhere anywhere owner UID match u0_a254
  382. RETURN all -- anywhere anywhere owner UID match u0_a255
  383. RETURN all -- anywhere anywhere owner UID match u0_a260
  384. RETURN all -- anywhere anywhere owner UID match u0_a269
  385. RETURN all -- anywhere anywhere owner UID match u0_a271
  386. RETURN udp -- anywhere anywhere udp dpt:domain owner UID match root
  387. RETURN udp -- anywhere anywhere udp dpt:ntp owner UID match system
  388. afwall-reject all -- anywhere anywhere owner UID match 0-999999999
  389.  
  390. Chain bw_FORWARD (1 references)
  391. target prot opt source destination
  392. bw_costly_rmnet_data0 all -- anywhere anywhere
  393. bw_costly_rmnet_data0 all -- anywhere anywhere
  394.  
  395. Chain bw_INPUT (1 references)
  396. target prot opt source destination
  397. all -- anywhere anywhere ! quota globalAlert: 2097152 bytes
  398. bw_costly_rmnet_data0 all -- anywhere anywhere
  399. RETURN esp -- anywhere anywhere
  400. RETURN all -- anywhere anywhere mark match 0x100000/0x100000
  401. all -- anywhere anywhere owner socket exists
  402. MARK all -- anywhere anywhere MARK or 0x100000
  403.  
  404. Chain bw_OUTPUT (1 references)
  405. target prot opt source destination
  406. all -- anywhere anywhere ! quota globalAlert: 2097152 bytes
  407. bw_costly_rmnet_data0 all -- anywhere anywhere
  408. RETURN all -- anywhere anywhere
  409. RETURN all -- anywhere anywhere policy match dir out pol ipsec
  410. all -- anywhere anywhere owner socket exists
  411.  
  412. Chain bw_costly_rmnet_data0 (4 references)
  413. target prot opt source destination
  414. bw_penalty_box all -- anywhere anywhere
  415. REJECT all -- anywhere anywhere ! quota rmnet_data0: 1873884586 bytes reject-with icmp-port-unreachable
  416.  
  417. Chain bw_costly_shared (0 references)
  418. target prot opt source destination
  419. bw_penalty_box all -- anywhere anywhere
  420.  
  421. Chain bw_data_saver (1 references)
  422. target prot opt source destination
  423. RETURN all -- anywhere anywhere
  424.  
  425. Chain bw_happy_box (1 references)
  426. target prot opt source destination
  427. RETURN all -- anywhere anywhere owner UID match u0_a28
  428. RETURN all -- anywhere anywhere owner UID match u0_a20
  429. RETURN all -- anywhere anywhere owner UID match 0-9999
  430. bw_data_saver all -- anywhere anywhere
  431.  
  432. Chain bw_penalty_box (2 references)
  433. target prot opt source destination
  434. bw_happy_box all -- anywhere anywhere
  435.  
  436. Chain fw_FORWARD (1 references)
  437. target prot opt source destination
  438.  
  439. Chain fw_INPUT (1 references)
  440. target prot opt source destination
  441. fw_standby all -- anywhere anywhere
  442.  
  443. Chain fw_OUTPUT (1 references)
  444. target prot opt source destination
  445. fw_standby all -- anywhere anywhere
  446.  
  447. Chain fw_dozable (0 references)
  448. target prot opt source destination
  449. RETURN all -- anywhere anywhere owner UID match u0_a90
  450. RETURN all -- anywhere anywhere owner UID match u0_a249
  451. RETURN all -- anywhere anywhere owner UID match u0_a139
  452. RETURN all -- anywhere anywhere owner UID match system
  453. RETURN all -- anywhere anywhere owner UID match radio
  454. RETURN all -- anywhere anywhere owner UID match nfc
  455. RETURN all -- anywhere anywhere owner UID match secure_element
  456. RETURN all -- anywhere anywhere owner UID match shell
  457. RETURN all -- anywhere anywhere owner UID match u0_a12
  458. RETURN all -- anywhere anywhere owner UID match u0_a13
  459. RETURN all -- anywhere anywhere owner UID match u0_a16
  460. RETURN all -- anywhere anywhere owner UID match u0_a19
  461. RETURN all -- anywhere anywhere owner UID match u0_a20
  462. RETURN all -- anywhere anywhere owner UID match u0_a24
  463. RETURN all -- anywhere anywhere owner UID match u0_a28
  464. RETURN all -- anywhere anywhere owner UID match u0_a32
  465. RETURN all -- anywhere anywhere owner UID match u0_a35
  466. RETURN all -- anywhere anywhere owner UID match u0_a36
  467. RETURN all -- anywhere anywhere owner UID match u0_a45
  468. RETURN all -- anywhere anywhere owner UID match u0_a74
  469. RETURN all -- anywhere anywhere owner UID match u0_a85
  470. RETURN all -- anywhere anywhere owner UID match u0_a101
  471. RETURN all -- anywhere anywhere owner UID match u0_a142
  472. RETURN all -- anywhere anywhere owner UID match u0_a177
  473. RETURN all -- anywhere anywhere owner UID match u0_a197
  474. RETURN all -- anywhere anywhere owner UID match u0_a220
  475. RETURN all -- anywhere anywhere owner UID match u0_a229
  476. RETURN all -- anywhere anywhere owner UID match u0_a230
  477. RETURN all -- anywhere anywhere owner UID match u0_a232
  478. RETURN all -- anywhere anywhere owner UID match u0_a241
  479. RETURN all -- anywhere anywhere owner UID match u0_a244
  480. RETURN all -- anywhere anywhere owner UID match u0_a248
  481. RETURN all -- anywhere anywhere owner UID match u0_a260
  482. RETURN all -- anywhere anywhere owner UID match 0-9999
  483. RETURN all -- anywhere anywhere ! owner UID match 0-4294967294
  484. RETURN esp -- anywhere anywhere
  485. RETURN all -- anywhere anywhere
  486. RETURN all -- anywhere anywhere
  487. RETURN tcp -- anywhere anywhere tcp flags:RST/RST
  488. DROP all -- anywhere anywhere
  489.  
  490. Chain fw_powersave (0 references)
  491. target prot opt source destination
  492. RETURN all -- anywhere anywhere owner UID match 0-9999
  493. RETURN all -- anywhere anywhere ! owner UID match 0-4294967294
  494. RETURN esp -- anywhere anywhere
  495. RETURN all -- anywhere anywhere
  496. RETURN all -- anywhere anywhere
  497. RETURN tcp -- anywhere anywhere tcp flags:RST/RST
  498. DROP all -- anywhere anywhere
  499.  
  500. Chain fw_standby (2 references)
  501. target prot opt source destination
  502. RETURN all -- anywhere anywhere
  503. RETURN all -- anywhere anywhere
  504. RETURN tcp -- anywhere anywhere tcp flags:RST/RST
  505. DROP all -- anywhere anywhere owner UID match u0_a4
  506. DROP all -- anywhere anywhere owner UID match u0_a9
  507. DROP all -- anywhere anywhere owner UID match u0_a17
  508. DROP all -- anywhere anywhere owner UID match u0_a29
  509. DROP all -- anywhere anywhere owner UID match u0_a30
  510. DROP all -- anywhere anywhere owner UID match u0_a37
  511. DROP all -- anywhere anywhere owner UID match u0_a41
  512. DROP all -- anywhere anywhere owner UID match u0_a42
  513. DROP all -- anywhere anywhere owner UID match u0_a44
  514. DROP all -- anywhere anywhere owner UID match u0_a47
  515. DROP all -- anywhere anywhere owner UID match u0_a57
  516. DROP all -- anywhere anywhere owner UID match u0_a61
  517. DROP all -- anywhere anywhere owner UID match u0_a62
  518. DROP all -- anywhere anywhere owner UID match u0_a64
  519. DROP all -- anywhere anywhere owner UID match u0_a67
  520. DROP all -- anywhere anywhere owner UID match u0_a72
  521. DROP all -- anywhere anywhere owner UID match u0_a75
  522. DROP all -- anywhere anywhere owner UID match u0_a78
  523. DROP all -- anywhere anywhere owner UID match u0_a80
  524. DROP all -- anywhere anywhere owner UID match u0_a81
  525. DROP all -- anywhere anywhere owner UID match u0_a86
  526. DROP all -- anywhere anywhere owner UID match u0_a91
  527. DROP all -- anywhere anywhere owner UID match u0_a93
  528. DROP all -- anywhere anywhere owner UID match u0_a95
  529. DROP all -- anywhere anywhere owner UID match u0_a97
  530. DROP all -- anywhere anywhere owner UID match u0_a98
  531. DROP all -- anywhere anywhere owner UID match u0_a99
  532. DROP all -- anywhere anywhere owner UID match u0_a109
  533. DROP all -- anywhere anywhere owner UID match u0_a111
  534. DROP all -- anywhere anywhere owner UID match u0_a112
  535. DROP all -- anywhere anywhere owner UID match u0_a116
  536. DROP all -- anywhere anywhere owner UID match u0_a117
  537. DROP all -- anywhere anywhere owner UID match u0_a124
  538. DROP all -- anywhere anywhere owner UID match u0_a126
  539. DROP all -- anywhere anywhere owner UID match u0_a127
  540. DROP all -- anywhere anywhere owner UID match u0_a128
  541. DROP all -- anywhere anywhere owner UID match u0_a129
  542. DROP all -- anywhere anywhere owner UID match u0_a130
  543. DROP all -- anywhere anywhere owner UID match u0_a132
  544. DROP all -- anywhere anywhere owner UID match u0_a133
  545. DROP all -- anywhere anywhere owner UID match u0_a134
  546. DROP all -- anywhere anywhere owner UID match u0_a135
  547. DROP all -- anywhere anywhere owner UID match u0_a137
  548. DROP all -- anywhere anywhere owner UID match u0_a140
  549. DROP all -- anywhere anywhere owner UID match u0_a141
  550. DROP all -- anywhere anywhere owner UID match u0_a143
  551. DROP all -- anywhere anywhere owner UID match u0_a144
  552. DROP all -- anywhere anywhere owner UID match u0_a146
  553. DROP all -- anywhere anywhere owner UID match u0_a148
  554. DROP all -- anywhere anywhere owner UID match u0_a149
  555. DROP all -- anywhere anywhere owner UID match u0_a150
  556. DROP all -- anywhere anywhere owner UID match u0_a153
  557. DROP all -- anywhere anywhere owner UID match u0_a155
  558. DROP all -- anywhere anywhere owner UID match u0_a160
  559. DROP all -- anywhere anywhere owner UID match u0_a162
  560. DROP all -- anywhere anywhere owner UID match u0_a163
  561. DROP all -- anywhere anywhere owner UID match u0_a166
  562. DROP all -- anywhere anywhere owner UID match u0_a168
  563. DROP all -- anywhere anywhere owner UID match u0_a172
  564. DROP all -- anywhere anywhere owner UID match u0_a174
  565. DROP all -- anywhere anywhere owner UID match u0_a176
  566. DROP all -- anywhere anywhere owner UID match u0_a178
  567. DROP all -- anywhere anywhere owner UID match u0_a179
  568. DROP all -- anywhere anywhere owner UID match u0_a180
  569. DROP all -- anywhere anywhere owner UID match u0_a181
  570. DROP all -- anywhere anywhere owner UID match u0_a182
  571. DROP all -- anywhere anywhere owner UID match u0_a184
  572. DROP all -- anywhere anywhere owner UID match u0_a185
  573. DROP all -- anywhere anywhere owner UID match u0_a188
  574. DROP all -- anywhere anywhere owner UID match u0_a189
  575. DROP all -- anywhere anywhere owner UID match u0_a193
  576. DROP all -- anywhere anywhere owner UID match u0_a194
  577. DROP all -- anywhere anywhere owner UID match u0_a195
  578. DROP all -- anywhere anywhere owner UID match u0_a196
  579. DROP all -- anywhere anywhere owner UID match u0_a198
  580. DROP all -- anywhere anywhere owner UID match u0_a199
  581. DROP all -- anywhere anywhere owner UID match u0_a200
  582. DROP all -- anywhere anywhere owner UID match u0_a201
  583. DROP all -- anywhere anywhere owner UID match u0_a202
  584. DROP all -- anywhere anywhere owner UID match u0_a203
  585. DROP all -- anywhere anywhere owner UID match u0_a204
  586. DROP all -- anywhere anywhere owner UID match u0_a205
  587. DROP all -- anywhere anywhere owner UID match u0_a206
  588. DROP all -- anywhere anywhere owner UID match u0_a208
  589. DROP all -- anywhere anywhere owner UID match u0_a210
  590. DROP all -- anywhere anywhere owner UID match u0_a212
  591. DROP all -- anywhere anywhere owner UID match u0_a215
  592. DROP all -- anywhere anywhere owner UID match u0_a216
  593. DROP all -- anywhere anywhere owner UID match u0_a217
  594. DROP all -- anywhere anywhere owner UID match u0_a218
  595. DROP all -- anywhere anywhere owner UID match u0_a219
  596. DROP all -- anywhere anywhere owner UID match u0_a221
  597. DROP all -- anywhere anywhere owner UID match u0_a222
  598. DROP all -- anywhere anywhere owner UID match u0_a223
  599. DROP all -- anywhere anywhere owner UID match u0_a225
  600. DROP all -- anywhere anywhere owner UID match u0_a227
  601. DROP all -- anywhere anywhere owner UID match u0_a233
  602. DROP all -- anywhere anywhere owner UID match u0_a234
  603. DROP all -- anywhere anywhere owner UID match u0_a236
  604. DROP all -- anywhere anywhere owner UID match u0_a239
  605. DROP all -- anywhere anywhere owner UID match u0_a243
  606. DROP all -- anywhere anywhere owner UID match u0_a245
  607. DROP all -- anywhere anywhere owner UID match u0_a246
  608. DROP all -- anywhere anywhere owner UID match u0_a247
  609. DROP all -- anywhere anywhere owner UID match u0_a250
  610. DROP all -- anywhere anywhere owner UID match u0_a251
  611. DROP all -- anywhere anywhere owner UID match u0_a252
  612. DROP all -- anywhere anywhere owner UID match u0_a253
  613. DROP all -- anywhere anywhere owner UID match u0_a255
  614. DROP all -- anywhere anywhere owner UID match u0_a152
  615. DROP all -- anywhere anywhere owner UID match u0_a235
  616. DROP all -- anywhere anywhere owner UID match u0_a125
  617. DROP all -- anywhere anywhere owner UID match u0_a157
  618. DROP all -- anywhere anywhere owner UID match u0_a48
  619. DROP all -- anywhere anywhere owner UID match u0_a118
  620. DROP all -- anywhere anywhere owner UID match u0_a105
  621. DROP all -- anywhere anywhere owner UID match u0_a186
  622. DROP all -- anywhere anywhere owner UID match u0_a192
  623. DROP all -- anywhere anywhere owner UID match u0_a154
  624. DROP all -- anywhere anywhere owner UID match u0_a15
  625. DROP all -- anywhere anywhere owner UID match u0_a171
  626. DROP all -- anywhere anywhere owner UID match u0_a138
  627. DROP all -- anywhere anywhere owner UID match u0_a23
  628. DROP all -- anywhere anywhere owner UID match u0_a191
  629. DROP all -- anywhere anywhere owner UID match u0_a34
  630. DROP all -- anywhere anywhere owner UID match u0_a156
  631. DROP all -- anywhere anywhere owner UID match u0_a63
  632. DROP all -- anywhere anywhere owner UID match u0_a190
  633. DROP all -- anywhere anywhere owner UID match u0_a52
  634. DROP all -- anywhere anywhere owner UID match u0_a131
  635. DROP all -- anywhere anywhere owner UID match u0_a213
  636. DROP all -- anywhere anywhere owner UID match u0_a214
  637. DROP all -- anywhere anywhere owner UID match u0_a228
  638. DROP all -- anywhere anywhere owner UID match u0_a261
  639. DROP all -- anywhere anywhere owner UID match u0_a76
  640. DROP all -- anywhere anywhere owner UID match u0_a254
  641.  
  642. Chain nm_mdmprxy_doze_mode_skip (2 references)
  643. target prot opt source destination
  644. ACCEPT all -- anywhere anywhere mark match 0x8
  645. ACCEPT all -- anywhere anywhere mark match 0x8
  646. ACCEPT all -- anywhere anywhere
  647.  
  648. Chain nm_mdmprxy_iface_pkt_fwder (1 references)
  649. target prot opt source destination
  650. ACCEPT all -- anywhere anywhere
  651. ACCEPT all -- anywhere anywhere
  652.  
  653. Chain oem_fwd (1 references)
  654. target prot opt source destination
  655.  
  656. Chain oem_out (1 references)
  657. target prot opt source destination
  658.  
  659. Chain st_OUTPUT (1 references)
  660. target prot opt source destination
  661.  
  662. Chain st_clear_caught (2 references)
  663. target prot opt source destination
  664.  
  665. Chain st_clear_detect (0 references)
  666. target prot opt source destination
  667. REJECT all -- anywhere anywhere connmark match 0x2000000/0x2000000 reject-with icmp-port-unreachable
  668. RETURN all -- anywhere anywhere connmark match 0x1000000/0x1000000
  669. CONNMARK tcp -- anywhere anywhere u32 "0x0>>0x16&0x3c@0xc>>0x1a&0x3c@0x0&0xffff0000=0x16030000&&0x0>>0x16&0x3c@0xc>>0x1a&0x3c@0x4&0xff0000=0x10000" CONNMARK or 0x1000000
  670. CONNMARK udp -- anywhere anywhere u32 "0x0>>0x16&0x3c@0x8&0xffff0000=0x16fe0000&&0x0>>0x16&0x3c@0x14&0xff0000=0x10000" CONNMARK or 0x1000000
  671. RETURN all -- anywhere anywhere connmark match 0x1000000/0x1000000
  672. st_clear_caught tcp -- anywhere anywhere state ESTABLISHED u32 "0x0>>0x16&0x3c@0xc>>0x1a&0x3c@0x0&0x0=0x0"
  673. st_clear_caught udp -- anywhere anywhere
  674.  
  675. Chain st_penalty_log (0 references)
  676. target prot opt source destination
  677. CONNMARK all -- anywhere anywhere CONNMARK or 0x1000000
  678. NFLOG all -- anywhere anywhere
  679.  
  680. Chain st_penalty_reject (0 references)
  681. target prot opt source destination
  682. CONNMARK all -- anywhere anywhere CONNMARK or 0x2000000
  683. NFLOG all -- anywhere anywhere
  684. REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
  685.  
  686. Chain tetherctrl_FORWARD (1 references)
  687. target prot opt source destination
  688. DROP all -- anywhere anywhere
  689.  
  690. Chain tetherctrl_counters (0 references)
  691. target prot opt source destination
  692.  
  693.  
  694. *********************************** ALLOWED with -S *******************************************************
  695. -P INPUT ACCEPT
  696. -P FORWARD ACCEPT
  697. -P OUTPUT ACCEPT
  698. -N afwall
  699. -N afwall-3g
  700. -N afwall-3g-fork
  701. -N afwall-3g-home
  702. -N afwall-3g-postcustom
  703. -N afwall-3g-roam
  704. -N afwall-3g-tether
  705. -N afwall-reject
  706. -N afwall-vpn
  707. -N afwall-wifi
  708. -N afwall-wifi-fork
  709. -N afwall-wifi-lan
  710. -N afwall-wifi-postcustom
  711. -N afwall-wifi-tether
  712. -N afwall-wifi-wan
  713. -N bw_FORWARD
  714. -N bw_INPUT
  715. -N bw_OUTPUT
  716. -N bw_costly_rmnet_data0
  717. -N bw_costly_shared
  718. -N bw_data_saver
  719. -N bw_happy_box
  720. -N bw_penalty_box
  721. -N fw_FORWARD
  722. -N fw_INPUT
  723. -N fw_OUTPUT
  724. -N fw_dozable
  725. -N fw_powersave
  726. -N fw_standby
  727. -N nm_mdmprxy_doze_mode_skip
  728. -N nm_mdmprxy_iface_pkt_fwder
  729. -N oem_fwd
  730. -N oem_out
  731. -N st_OUTPUT
  732. -N st_clear_caught
  733. -N st_clear_detect
  734. -N st_penalty_log
  735. -N st_penalty_reject
  736. -N tetherctrl_FORWARD
  737. -N tetherctrl_counters
  738. -A INPUT -j nm_mdmprxy_doze_mode_skip
  739. -A INPUT -j bw_INPUT
  740. -A INPUT -j fw_INPUT
  741. -A FORWARD -j nm_mdmprxy_iface_pkt_fwder
  742. -A FORWARD -j oem_fwd
  743. -A FORWARD -j fw_FORWARD
  744. -A FORWARD -j bw_FORWARD
  745. -A FORWARD -j tetherctrl_FORWARD
  746. -A OUTPUT -j afwall
  747. -A OUTPUT -j nm_mdmprxy_doze_mode_skip
  748. -A OUTPUT -o r_rmnet_data8 -p udp -m udp --dport 1900 -j DROP
  749. -A OUTPUT -o r_rmnet_data7 -p udp -m udp --dport 1900 -j DROP
  750. -A OUTPUT -o r_rmnet_data6 -p udp -m udp --dport 1900 -j DROP
  751. -A OUTPUT -o r_rmnet_data5 -p udp -m udp --dport 1900 -j DROP
  752. -A OUTPUT -o r_rmnet_data4 -p udp -m udp --dport 1900 -j DROP
  753. -A OUTPUT -o r_rmnet_data3 -p udp -m udp --dport 1900 -j DROP
  754. -A OUTPUT -o r_rmnet_data2 -p udp -m udp --dport 1900 -j DROP
  755. -A OUTPUT -o r_rmnet_data1 -p udp -m udp --dport 1900 -j DROP
  756. -A OUTPUT -o r_rmnet_data0 -p udp -m udp --dport 1900 -j DROP
  757. -A OUTPUT -o rmnet_data7 -p udp -m udp --dport 1900 -j DROP
  758. -A OUTPUT -o rmnet_data6 -p udp -m udp --dport 1900 -j DROP
  759. -A OUTPUT -o rmnet_data5 -p udp -m udp --dport 1900 -j DROP
  760. -A OUTPUT -o rmnet_data4 -p udp -m udp --dport 1900 -j DROP
  761. -A OUTPUT -o rmnet_data3 -p udp -m udp --dport 1900 -j DROP
  762. -A OUTPUT -o rmnet_data2 -p udp -m udp --dport 1900 -j DROP
  763. -A OUTPUT -o rmnet_data1 -p udp -m udp --dport 1900 -j DROP
  764. -A OUTPUT -o rmnet_data0 -p udp -m udp --dport 1900 -j DROP
  765. -A OUTPUT -j oem_out
  766. -A OUTPUT -j fw_OUTPUT
  767. -A OUTPUT -j st_OUTPUT
  768. -A OUTPUT -j bw_OUTPUT
  769. -A afwall -o eth+ -j afwall-wifi
  770. -A afwall -o wlan+ -j afwall-wifi
  771. -A afwall -o tiwlan+ -j afwall-wifi
  772. -A afwall -o ra+ -j afwall-wifi
  773. -A afwall -o bnep+ -j afwall-wifi
  774. -A afwall -o rmnet+ -j afwall-3g
  775. -A afwall -o pdp+ -j afwall-3g
  776. -A afwall -o uwbr+ -j afwall-3g
  777. -A afwall -o wimax+ -j afwall-3g
  778. -A afwall -o vsnet+ -j afwall-3g
  779. -A afwall -o rmnet_sdio+ -j afwall-3g
  780. -A afwall -o ccmni+ -j afwall-3g
  781. -A afwall -o qmi+ -j afwall-3g
  782. -A afwall -o svnet0+ -j afwall-3g
  783. -A afwall -o ccemni+ -j afwall-3g
  784. -A afwall -o wwan+ -j afwall-3g
  785. -A afwall -o cdma_rmnet+ -j afwall-3g
  786. -A afwall -o usb+ -j afwall-3g
  787. -A afwall -o rmnet_usb+ -j afwall-3g
  788. -A afwall -o clat4+ -j afwall-3g
  789. -A afwall -o cc2mni+ -j afwall-3g
  790. -A afwall -o bond1+ -j afwall-3g
  791. -A afwall -o rmnet_smux+ -j afwall-3g
  792. -A afwall -o ccinet+ -j afwall-3g
  793. -A afwall -o v4-rmnet+ -j afwall-3g
  794. -A afwall -o seth_w+ -j afwall-3g
  795. -A afwall -o v4-rmnet_data+ -j afwall-3g
  796. -A afwall -o rmnet_ipa+ -j afwall-3g
  797. -A afwall -o rmnet_data+ -j afwall-3g
  798. -A afwall -o r_rmnet_data+ -j afwall-3g
  799. -A afwall-3g -j afwall-3g-postcustom
  800. -A afwall-3g-fork -j afwall-3g-home
  801. -A afwall-3g-home -m owner --uid-owner 0 -j RETURN
  802. -A afwall-3g-home -m owner --uid-owner 1000 -j RETURN
  803. -A afwall-3g-home -m owner --uid-owner 1001 -j RETURN
  804. -A afwall-3g-home -m owner --uid-owner 1016 -j RETURN
  805. -A afwall-3g-home -m owner --uid-owner 1021 -j RETURN
  806. -A afwall-3g-home -m owner --uid-owner 10004 -j RETURN
  807. -A afwall-3g-home -m owner --uid-owner 10016 -j RETURN
  808. -A afwall-3g-home -m owner --uid-owner 10019 -j RETURN
  809. -A afwall-3g-home -m owner --uid-owner 10020 -j RETURN
  810. -A afwall-3g-home -m owner --uid-owner 10023 -j RETURN
  811. -A afwall-3g-home -m owner --uid-owner 10028 -j RETURN
  812. -A afwall-3g-home -m owner --uid-owner 10034 -j RETURN
  813. -A afwall-3g-home -m owner --uid-owner 10036 -j RETURN
  814. -A afwall-3g-home -m owner --uid-owner 10045 -j RETURN
  815. -A afwall-3g-home -m owner --uid-owner 10046 -j RETURN
  816. -A afwall-3g-home -m owner --uid-owner 10048 -j RETURN
  817. -A afwall-3g-home -m owner --uid-owner 10052 -j RETURN
  818. -A afwall-3g-home -m owner --uid-owner 10063 -j RETURN
  819. -A afwall-3g-home -m owner --uid-owner 10065 -j RETURN
  820. -A afwall-3g-home -m owner --uid-owner 10069 -j RETURN
  821. -A afwall-3g-home -m owner --uid-owner 10070 -j RETURN
  822. -A afwall-3g-home -m owner --uid-owner 10080 -j RETURN
  823. -A afwall-3g-home -m owner --uid-owner 10082 -j RETURN
  824. -A afwall-3g-home -m owner --uid-owner 10089 -j RETURN
  825. -A afwall-3g-home -m owner --uid-owner 10090 -j RETURN
  826. -A afwall-3g-home -m owner --uid-owner 10100 -j RETURN
  827. -A afwall-3g-home -m owner --uid-owner 10103 -j RETURN
  828. -A afwall-3g-home -m owner --uid-owner 10105 -j RETURN
  829. -A afwall-3g-home -m owner --uid-owner 10112 -j RETURN
  830. -A afwall-3g-home -m owner --uid-owner 10113 -j RETURN
  831. -A afwall-3g-home -m owner --uid-owner 10116 -j RETURN
  832. -A afwall-3g-home -m owner --uid-owner 10118 -j RETURN
  833. -A afwall-3g-home -m owner --uid-owner 10121 -j RETURN
  834. -A afwall-3g-home -m owner --uid-owner 10127 -j RETURN
  835. -A afwall-3g-home -m owner --uid-owner 10128 -j RETURN
  836. -A afwall-3g-home -m owner --uid-owner 10129 -j RETURN
  837. -A afwall-3g-home -m owner --uid-owner 10130 -j RETURN
  838. -A afwall-3g-home -m owner --uid-owner 10131 -j RETURN
  839. -A afwall-3g-home -m owner --uid-owner 10132 -j RETURN
  840. -A afwall-3g-home -m owner --uid-owner 10134 -j RETURN
  841. -A afwall-3g-home -m owner --uid-owner 10135 -j RETURN
  842. -A afwall-3g-home -m owner --uid-owner 10137 -j RETURN
  843. -A afwall-3g-home -m owner --uid-owner 10138 -j RETURN
  844. -A afwall-3g-home -m owner --uid-owner 10139 -j RETURN
  845. -A afwall-3g-home -m owner --uid-owner 10140 -j RETURN
  846. -A afwall-3g-home -m owner --uid-owner 10143 -j RETURN
  847. -A afwall-3g-home -m owner --uid-owner 10144 -j RETURN
  848. -A afwall-3g-home -m owner --uid-owner 10146 -j RETURN
  849. -A afwall-3g-home -m owner --uid-owner 10147 -j RETURN
  850. -A afwall-3g-home -m owner --uid-owner 10150 -j RETURN
  851. -A afwall-3g-home -m owner --uid-owner 10153 -j RETURN
  852. -A afwall-3g-home -m owner --uid-owner 10156 -j RETURN
  853. -A afwall-3g-home -m owner --uid-owner 10157 -j RETURN
  854. -A afwall-3g-home -m owner --uid-owner 10158 -j RETURN
  855. -A afwall-3g-home -m owner --uid-owner 10159 -j RETURN
  856. -A afwall-3g-home -m owner --uid-owner 10161 -j RETURN
  857. -A afwall-3g-home -m owner --uid-owner 10162 -j RETURN
  858. -A afwall-3g-home -m owner --uid-owner 10166 -j RETURN
  859. -A afwall-3g-home -m owner --uid-owner 10168 -j RETURN
  860. -A afwall-3g-home -m owner --uid-owner 10171 -j RETURN
  861. -A afwall-3g-home -m owner --uid-owner 10172 -j RETURN
  862. -A afwall-3g-home -m owner --uid-owner 10174 -j RETURN
  863. -A afwall-3g-home -m owner --uid-owner 10177 -j RETURN
  864. -A afwall-3g-home -m owner --uid-owner 10179 -j RETURN
  865. -A afwall-3g-home -m owner --uid-owner 10181 -j RETURN
  866. -A afwall-3g-home -m owner --uid-owner 10182 -j RETURN
  867. -A afwall-3g-home -m owner --uid-owner 10184 -j RETURN
  868. -A afwall-3g-home -m owner --uid-owner 10185 -j RETURN
  869. -A afwall-3g-home -m owner --uid-owner 10187 -j RETURN
  870. -A afwall-3g-home -m owner --uid-owner 10189 -j RETURN
  871. -A afwall-3g-home -m owner --uid-owner 10190 -j RETURN
  872. -A afwall-3g-home -m owner --uid-owner 10191 -j RETURN
  873. -A afwall-3g-home -m owner --uid-owner 10192 -j RETURN
  874. -A afwall-3g-home -m owner --uid-owner 10193 -j RETURN
  875. -A afwall-3g-home -m owner --uid-owner 10194 -j RETURN
  876. -A afwall-3g-home -m owner --uid-owner 10198 -j RETURN
  877. -A afwall-3g-home -m owner --uid-owner 10200 -j RETURN
  878. -A afwall-3g-home -m owner --uid-owner 10201 -j RETURN
  879. -A afwall-3g-home -m owner --uid-owner 10202 -j RETURN
  880. -A afwall-3g-home -m owner --uid-owner 10203 -j RETURN
  881. -A afwall-3g-home -m owner --uid-owner 10205 -j RETURN
  882. -A afwall-3g-home -m owner --uid-owner 10206 -j RETURN
  883. -A afwall-3g-home -m owner --uid-owner 10207 -j RETURN
  884. -A afwall-3g-home -m owner --uid-owner 10211 -j RETURN
  885. -A afwall-3g-home -m owner --uid-owner 10212 -j RETURN
  886. -A afwall-3g-home -m owner --uid-owner 10213 -j RETURN
  887. -A afwall-3g-home -m owner --uid-owner 10214 -j RETURN
  888. -A afwall-3g-home -m owner --uid-owner 10215 -j RETURN
  889. -A afwall-3g-home -m owner --uid-owner 10216 -j RETURN
  890. -A afwall-3g-home -m owner --uid-owner 10218 -j RETURN
  891. -A afwall-3g-home -m owner --uid-owner 10220 -j RETURN
  892. -A afwall-3g-home -m owner --uid-owner 10221 -j RETURN
  893. -A afwall-3g-home -m owner --uid-owner 10223 -j RETURN
  894. -A afwall-3g-home -m owner --uid-owner 10224 -j RETURN
  895. -A afwall-3g-home -m owner --uid-owner 10225 -j RETURN
  896. -A afwall-3g-home -m owner --uid-owner 10227 -j RETURN
  897. -A afwall-3g-home -m owner --uid-owner 10228 -j RETURN
  898. -A afwall-3g-home -m owner --uid-owner 10232 -j RETURN
  899. -A afwall-3g-home -m owner --uid-owner 10235 -j RETURN
  900. -A afwall-3g-home -m owner --uid-owner 10236 -j RETURN
  901. -A afwall-3g-home -m owner --uid-owner 10239 -j RETURN
  902. -A afwall-3g-home -m owner --uid-owner 10244 -j RETURN
  903. -A afwall-3g-home -m owner --uid-owner 10245 -j RETURN
  904. -A afwall-3g-home -m owner --uid-owner 10246 -j RETURN
  905. -A afwall-3g-home -m owner --uid-owner 10248 -j RETURN
  906. -A afwall-3g-home -m owner --uid-owner 10251 -j RETURN
  907. -A afwall-3g-home -m owner --uid-owner 10252 -j RETURN
  908. -A afwall-3g-home -m owner --uid-owner 10253 -j RETURN
  909. -A afwall-3g-home -m owner --uid-owner 10254 -j RETURN
  910. -A afwall-3g-home -m owner --uid-owner 10255 -j RETURN
  911. -A afwall-3g-home -m owner --uid-owner 10260 -j RETURN
  912. -A afwall-3g-home -m owner --uid-owner 10269 -j RETURN
  913. -A afwall-3g-home -m owner --uid-owner 10271 -j RETURN
  914. -A afwall-3g-home -p udp -m udp --dport 53 -m owner --uid-owner 0 -j RETURN
  915. -A afwall-3g-home -p udp -m udp --dport 123 -m owner --uid-owner 1000 -j RETURN
  916. -A afwall-3g-home -m owner --uid-owner 0-999999999 -j afwall-reject
  917. -A afwall-3g-postcustom -j afwall-3g-fork
  918. -A afwall-3g-roam -p udp -m udp --dport 53 -m owner --uid-owner 0 -j RETURN
  919. -A afwall-3g-roam -j afwall-reject
  920. -A afwall-3g-tether -j afwall-3g-fork
  921. -A afwall-reject -j NFLOG --nflog-prefix "{AFL}" --nflog-group 40
  922. -A afwall-reject -j REJECT --reject-with icmp-port-unreachable
  923. -A afwall-vpn -p udp -m udp --dport 53 -m owner --uid-owner 0 -j RETURN
  924. -A afwall-vpn -j afwall-reject
  925. -A afwall-wifi -j afwall-wifi-postcustom
  926. -A afwall-wifi-fork -j afwall-wifi-wan
  927. -A afwall-wifi-lan -p udp -m udp --dport 53 -j RETURN
  928. -A afwall-wifi-lan -p udp -m udp --dport 53 -m owner --uid-owner 0 -j RETURN
  929. -A afwall-wifi-lan -j afwall-reject
  930. -A afwall-wifi-postcustom -m owner --uid-owner 1014 -j RETURN
  931. -A afwall-wifi-postcustom -m owner --uid-owner 1010 -j RETURN
  932. -A afwall-wifi-postcustom -j afwall-wifi-fork
  933. -A afwall-wifi-tether -j afwall-wifi-fork
  934. -A afwall-wifi-wan -m owner --uid-owner 0 -j RETURN
  935. -A afwall-wifi-wan -m owner --uid-owner 1000 -j RETURN
  936. -A afwall-wifi-wan -m owner --uid-owner 1001 -j RETURN
  937. -A afwall-wifi-wan -m owner --uid-owner 1016 -j RETURN
  938. -A afwall-wifi-wan -m owner --uid-owner 1021 -j RETURN
  939. -A afwall-wifi-wan -m owner --uid-owner 10004 -j RETURN
  940. -A afwall-wifi-wan -m owner --uid-owner 10016 -j RETURN
  941. -A afwall-wifi-wan -m owner --uid-owner 10019 -j RETURN
  942. -A afwall-wifi-wan -m owner --uid-owner 10020 -j RETURN
  943. -A afwall-wifi-wan -m owner --uid-owner 10022 -j RETURN
  944. -A afwall-wifi-wan -m owner --uid-owner 10023 -j RETURN
  945. -A afwall-wifi-wan -m owner --uid-owner 10028 -j RETURN
  946. -A afwall-wifi-wan -m owner --uid-owner 10034 -j RETURN
  947. -A afwall-wifi-wan -m owner --uid-owner 10036 -j RETURN
  948. -A afwall-wifi-wan -m owner --uid-owner 10045 -j RETURN
  949. -A afwall-wifi-wan -m owner --uid-owner 10046 -j RETURN
  950. -A afwall-wifi-wan -m owner --uid-owner 10048 -j RETURN
  951. -A afwall-wifi-wan -m owner --uid-owner 10052 -j RETURN
  952. -A afwall-wifi-wan -m owner --uid-owner 10063 -j RETURN
  953. -A afwall-wifi-wan -m owner --uid-owner 10065 -j RETURN
  954. -A afwall-wifi-wan -m owner --uid-owner 10069 -j RETURN
  955. -A afwall-wifi-wan -m owner --uid-owner 10070 -j RETURN
  956. -A afwall-wifi-wan -m owner --uid-owner 10072 -j RETURN
  957. -A afwall-wifi-wan -m owner --uid-owner 10080 -j RETURN
  958. -A afwall-wifi-wan -m owner --uid-owner 10082 -j RETURN
  959. -A afwall-wifi-wan -m owner --uid-owner 10089 -j RETURN
  960. -A afwall-wifi-wan -m owner --uid-owner 10090 -j RETURN
  961. -A afwall-wifi-wan -m owner --uid-owner 10091 -j RETURN
  962. -A afwall-wifi-wan -m owner --uid-owner 10100 -j RETURN
  963. -A afwall-wifi-wan -m owner --uid-owner 10103 -j RETURN
  964. -A afwall-wifi-wan -m owner --uid-owner 10105 -j RETURN
  965. -A afwall-wifi-wan -m owner --uid-owner 10112 -j RETURN
  966. -A afwall-wifi-wan -m owner --uid-owner 10113 -j RETURN
  967. -A afwall-wifi-wan -m owner --uid-owner 10116 -j RETURN
  968. -A afwall-wifi-wan -m owner --uid-owner 10118 -j RETURN
  969. -A afwall-wifi-wan -m owner --uid-owner 10121 -j RETURN
  970. -A afwall-wifi-wan -m owner --uid-owner 10127 -j RETURN
  971. -A afwall-wifi-wan -m owner --uid-owner 10128 -j RETURN
  972. -A afwall-wifi-wan -m owner --uid-owner 10129 -j RETURN
  973. -A afwall-wifi-wan -m owner --uid-owner 10130 -j RETURN
  974. -A afwall-wifi-wan -m owner --uid-owner 10131 -j RETURN
  975. -A afwall-wifi-wan -m owner --uid-owner 10132 -j RETURN
  976. -A afwall-wifi-wan -m owner --uid-owner 10134 -j RETURN
  977. -A afwall-wifi-wan -m owner --uid-owner 10135 -j RETURN
  978. -A afwall-wifi-wan -m owner --uid-owner 10137 -j RETURN
  979. -A afwall-wifi-wan -m owner --uid-owner 10138 -j RETURN
  980. -A afwall-wifi-wan -m owner --uid-owner 10139 -j RETURN
  981. -A afwall-wifi-wan -m owner --uid-owner 10140 -j RETURN
  982. -A afwall-wifi-wan -m owner --uid-owner 10141 -j RETURN
  983. -A afwall-wifi-wan -m owner --uid-owner 10142 -j RETURN
  984. -A afwall-wifi-wan -m owner --uid-owner 10143 -j RETURN
  985. -A afwall-wifi-wan -m owner --uid-owner 10144 -j RETURN
  986. -A afwall-wifi-wan -m owner --uid-owner 10146 -j RETURN
  987. -A afwall-wifi-wan -m owner --uid-owner 10147 -j RETURN
  988. -A afwall-wifi-wan -m owner --uid-owner 10149 -j RETURN
  989. -A afwall-wifi-wan -m owner --uid-owner 10150 -j RETURN
  990. -A afwall-wifi-wan -m owner --uid-owner 10153 -j RETURN
  991. -A afwall-wifi-wan -m owner --uid-owner 10154 -j RETURN
  992. -A afwall-wifi-wan -m owner --uid-owner 10155 -j RETURN
  993. -A afwall-wifi-wan -m owner --uid-owner 10156 -j RETURN
  994. -A afwall-wifi-wan -m owner --uid-owner 10157 -j RETURN
  995. -A afwall-wifi-wan -m owner --uid-owner 10158 -j RETURN
  996. -A afwall-wifi-wan -m owner --uid-owner 10159 -j RETURN
  997. -A afwall-wifi-wan -m owner --uid-owner 10160 -j RETURN
  998. -A afwall-wifi-wan -m owner --uid-owner 10161 -j RETURN
  999. -A afwall-wifi-wan -m owner --uid-owner 10162 -j RETURN
  1000. -A afwall-wifi-wan -m owner --uid-owner 10166 -j RETURN
  1001. -A afwall-wifi-wan -m owner --uid-owner 10167 -j RETURN
  1002. -A afwall-wifi-wan -m owner --uid-owner 10168 -j RETURN
  1003. -A afwall-wifi-wan -m owner --uid-owner 10171 -j RETURN
  1004. -A afwall-wifi-wan -m owner --uid-owner 10172 -j RETURN
  1005. -A afwall-wifi-wan -m owner --uid-owner 10174 -j RETURN
  1006. -A afwall-wifi-wan -m owner --uid-owner 10175 -j RETURN
  1007. -A afwall-wifi-wan -m owner --uid-owner 10176 -j RETURN
  1008. -A afwall-wifi-wan -m owner --uid-owner 10177 -j RETURN
  1009. -A afwall-wifi-wan -m owner --uid-owner 10179 -j RETURN
  1010. -A afwall-wifi-wan -m owner --uid-owner 10181 -j RETURN
  1011. -A afwall-wifi-wan -m owner --uid-owner 10182 -j RETURN
  1012. -A afwall-wifi-wan -m owner --uid-owner 10184 -j RETURN
  1013. -A afwall-wifi-wan -m owner --uid-owner 10185 -j RETURN
  1014. -A afwall-wifi-wan -m owner --uid-owner 10186 -j RETURN
  1015. -A afwall-wifi-wan -m owner --uid-owner 10187 -j RETURN
  1016. -A afwall-wifi-wan -m owner --uid-owner 10188 -j RETURN
  1017. -A afwall-wifi-wan -m owner --uid-owner 10189 -j RETURN
  1018. -A afwall-wifi-wan -m owner --uid-owner 10190 -j RETURN
  1019. -A afwall-wifi-wan -m owner --uid-owner 10191 -j RETURN
  1020. -A afwall-wifi-wan -m owner --uid-owner 10192 -j RETURN
  1021. -A afwall-wifi-wan -m owner --uid-owner 10193 -j RETURN
  1022. -A afwall-wifi-wan -m owner --uid-owner 10194 -j RETURN
  1023. -A afwall-wifi-wan -m owner --uid-owner 10195 -j RETURN
  1024. -A afwall-wifi-wan -m owner --uid-owner 10198 -j RETURN
  1025. -A afwall-wifi-wan -m owner --uid-owner 10199 -j RETURN
  1026. -A afwall-wifi-wan -m owner --uid-owner 10200 -j RETURN
  1027. -A afwall-wifi-wan -m owner --uid-owner 10201 -j RETURN
  1028. -A afwall-wifi-wan -m owner --uid-owner 10202 -j RETURN
  1029. -A afwall-wifi-wan -m owner --uid-owner 10203 -j RETURN
  1030. -A afwall-wifi-wan -m owner --uid-owner 10204 -j RETURN
  1031. -A afwall-wifi-wan -m owner --uid-owner 10205 -j RETURN
  1032. -A afwall-wifi-wan -m owner --uid-owner 10206 -j RETURN
  1033. -A afwall-wifi-wan -m owner --uid-owner 10207 -j RETURN
  1034. -A afwall-wifi-wan -m owner --uid-owner 10208 -j RETURN
  1035. -A afwall-wifi-wan -m owner --uid-owner 10210 -j RETURN
  1036. -A afwall-wifi-wan -m owner --uid-owner 10211 -j RETURN
  1037. -A afwall-wifi-wan -m owner --uid-owner 10212 -j RETURN
  1038. -A afwall-wifi-wan -m owner --uid-owner 10213 -j RETURN
  1039. -A afwall-wifi-wan -m owner --uid-owner 10214 -j RETURN
  1040. -A afwall-wifi-wan -m owner --uid-owner 10215 -j RETURN
  1041. -A afwall-wifi-wan -m owner --uid-owner 10216 -j RETURN
  1042. -A afwall-wifi-wan -m owner --uid-owner 10218 -j RETURN
  1043. -A afwall-wifi-wan -m owner --uid-owner 10220 -j RETURN
  1044. -A afwall-wifi-wan -m owner --uid-owner 10221 -j RETURN
  1045. -A afwall-wifi-wan -m owner --uid-owner 10223 -j RETURN
  1046. -A afwall-wifi-wan -m owner --uid-owner 10224 -j RETURN
  1047. -A afwall-wifi-wan -m owner --uid-owner 10225 -j RETURN
  1048. -A afwall-wifi-wan -m owner --uid-owner 10227 -j RETURN
  1049. -A afwall-wifi-wan -m owner --uid-owner 10228 -j RETURN
  1050. -A afwall-wifi-wan -m owner --uid-owner 10232 -j RETURN
  1051. -A afwall-wifi-wan -m owner --uid-owner 10233 -j RETURN
  1052. -A afwall-wifi-wan -m owner --uid-owner 10234 -j RETURN
  1053. -A afwall-wifi-wan -m owner --uid-owner 10235 -j RETURN
  1054. -A afwall-wifi-wan -m owner --uid-owner 10236 -j RETURN
  1055. -A afwall-wifi-wan -m owner --uid-owner 10239 -j RETURN
  1056. -A afwall-wifi-wan -m owner --uid-owner 10244 -j RETURN
  1057. -A afwall-wifi-wan -m owner --uid-owner 10245 -j RETURN
  1058. -A afwall-wifi-wan -m owner --uid-owner 10246 -j RETURN
  1059. -A afwall-wifi-wan -m owner --uid-owner 10248 -j RETURN
  1060. -A afwall-wifi-wan -m owner --uid-owner 10251 -j RETURN
  1061. -A afwall-wifi-wan -m owner --uid-owner 10252 -j RETURN
  1062. -A afwall-wifi-wan -m owner --uid-owner 10253 -j RETURN
  1063. -A afwall-wifi-wan -m owner --uid-owner 10254 -j RETURN
  1064. -A afwall-wifi-wan -m owner --uid-owner 10255 -j RETURN
  1065. -A afwall-wifi-wan -m owner --uid-owner 10260 -j RETURN
  1066. -A afwall-wifi-wan -m owner --uid-owner 10269 -j RETURN
  1067. -A afwall-wifi-wan -m owner --uid-owner 10271 -j RETURN
  1068. -A afwall-wifi-wan -p udp -m udp --dport 53 -m owner --uid-owner 0 -j RETURN
  1069. -A afwall-wifi-wan -p udp -m udp --dport 123 -m owner --uid-owner 1000 -j RETURN
  1070. -A afwall-wifi-wan -m owner --uid-owner 0-999999999 -j afwall-reject
  1071. -A bw_FORWARD -i rmnet_data0 -j bw_costly_rmnet_data0
  1072. -A bw_FORWARD -o rmnet_data0 -j bw_costly_rmnet_data0
  1073. -A bw_INPUT -m quota2 ! --name globalAlert --quota 2097152
  1074. -A bw_INPUT -i rmnet_data0 -j bw_costly_rmnet_data0
  1075. -A bw_INPUT -p esp -j RETURN
  1076. -A bw_INPUT -m mark --mark 0x100000/0x100000 -j RETURN
  1077. -A bw_INPUT -m owner --socket-exists
  1078. -A bw_INPUT -j MARK --set-xmark 0x100000/0x100000
  1079. -A bw_OUTPUT -m quota2 ! --name globalAlert --quota 2097152
  1080. -A bw_OUTPUT -o rmnet_data0 -j bw_costly_rmnet_data0
  1081. -A bw_OUTPUT -o ipsec+ -j RETURN
  1082. -A bw_OUTPUT -m policy --dir out --pol ipsec -j RETURN
  1083. -A bw_OUTPUT -m owner --socket-exists
  1084. -A bw_costly_rmnet_data0 -j bw_penalty_box
  1085. -A bw_costly_rmnet_data0 -m quota2 ! --name rmnet_data0 --quota 1873884586 -j REJECT --reject-with icmp-port-unreachable
  1086. -A bw_costly_shared -j bw_penalty_box
  1087. -A bw_data_saver -j RETURN
  1088. -A bw_happy_box -m owner --uid-owner 10028 -j RETURN
  1089. -A bw_happy_box -m owner --uid-owner 10020 -j RETURN
  1090. -A bw_happy_box -m owner --uid-owner 0-9999 -j RETURN
  1091. -A bw_happy_box -j bw_data_saver
  1092. -A bw_penalty_box -j bw_happy_box
  1093. -A fw_INPUT -j fw_standby
  1094. -A fw_OUTPUT -j fw_standby
  1095. -A fw_dozable -m owner --uid-owner 10090 -j RETURN
  1096. -A fw_dozable -m owner --uid-owner 10249 -j RETURN
  1097. -A fw_dozable -m owner --uid-owner 10139 -j RETURN
  1098. -A fw_dozable -m owner --uid-owner 1000 -j RETURN
  1099. -A fw_dozable -m owner --uid-owner 1001 -j RETURN
  1100. -A fw_dozable -m owner --uid-owner 1027 -j RETURN
  1101. -A fw_dozable -m owner --uid-owner 1068 -j RETURN
  1102. -A fw_dozable -m owner --uid-owner 2000 -j RETURN
  1103. -A fw_dozable -m owner --uid-owner 10012 -j RETURN
  1104. -A fw_dozable -m owner --uid-owner 10013 -j RETURN
  1105. -A fw_dozable -m owner --uid-owner 10016 -j RETURN
  1106. -A fw_dozable -m owner --uid-owner 10019 -j RETURN
  1107. -A fw_dozable -m owner --uid-owner 10020 -j RETURN
  1108. -A fw_dozable -m owner --uid-owner 10024 -j RETURN
  1109. -A fw_dozable -m owner --uid-owner 10028 -j RETURN
  1110. -A fw_dozable -m owner --uid-owner 10032 -j RETURN
  1111. -A fw_dozable -m owner --uid-owner 10035 -j RETURN
  1112. -A fw_dozable -m owner --uid-owner 10036 -j RETURN
  1113. -A fw_dozable -m owner --uid-owner 10045 -j RETURN
  1114. -A fw_dozable -m owner --uid-owner 10074 -j RETURN
  1115. -A fw_dozable -m owner --uid-owner 10085 -j RETURN
  1116. -A fw_dozable -m owner --uid-owner 10101 -j RETURN
  1117. -A fw_dozable -m owner --uid-owner 10142 -j RETURN
  1118. -A fw_dozable -m owner --uid-owner 10177 -j RETURN
  1119. -A fw_dozable -m owner --uid-owner 10197 -j RETURN
  1120. -A fw_dozable -m owner --uid-owner 10220 -j RETURN
  1121. -A fw_dozable -m owner --uid-owner 10229 -j RETURN
  1122. -A fw_dozable -m owner --uid-owner 10230 -j RETURN
  1123. -A fw_dozable -m owner --uid-owner 10232 -j RETURN
  1124. -A fw_dozable -m owner --uid-owner 10241 -j RETURN
  1125. -A fw_dozable -m owner --uid-owner 10244 -j RETURN
  1126. -A fw_dozable -m owner --uid-owner 10248 -j RETURN
  1127. -A fw_dozable -m owner --uid-owner 10260 -j RETURN
  1128. -A fw_dozable -m owner --uid-owner 0-9999 -j RETURN
  1129. -A fw_dozable -m owner ! --uid-owner 0-4294967294 -j RETURN
  1130. -A fw_dozable -p esp -j RETURN
  1131. -A fw_dozable -i lo -j RETURN
  1132. -A fw_dozable -o lo -j RETURN
  1133. -A fw_dozable -p tcp -m tcp --tcp-flags RST RST -j RETURN
  1134. -A fw_dozable -j DROP
  1135. -A fw_powersave -m owner --uid-owner 0-9999 -j RETURN
  1136. -A fw_powersave -m owner ! --uid-owner 0-4294967294 -j RETURN
  1137. -A fw_powersave -p esp -j RETURN
  1138. -A fw_powersave -i lo -j RETURN
  1139. -A fw_powersave -o lo -j RETURN
  1140. -A fw_powersave -p tcp -m tcp --tcp-flags RST RST -j RETURN
  1141. -A fw_powersave -j DROP
  1142. -A fw_standby -i lo -j RETURN
  1143. -A fw_standby -o lo -j RETURN
  1144. -A fw_standby -p tcp -m tcp --tcp-flags RST RST -j RETURN
  1145. -A fw_standby -m owner --uid-owner 10004 -j DROP
  1146. -A fw_standby -m owner --uid-owner 10009 -j DROP
  1147. -A fw_standby -m owner --uid-owner 10017 -j DROP
  1148. -A fw_standby -m owner --uid-owner 10029 -j DROP
  1149. -A fw_standby -m owner --uid-owner 10030 -j DROP
  1150. -A fw_standby -m owner --uid-owner 10037 -j DROP
  1151. -A fw_standby -m owner --uid-owner 10041 -j DROP
  1152. -A fw_standby -m owner --uid-owner 10042 -j DROP
  1153. -A fw_standby -m owner --uid-owner 10044 -j DROP
  1154. -A fw_standby -m owner --uid-owner 10047 -j DROP
  1155. -A fw_standby -m owner --uid-owner 10057 -j DROP
  1156. -A fw_standby -m owner --uid-owner 10061 -j DROP
  1157. -A fw_standby -m owner --uid-owner 10062 -j DROP
  1158. -A fw_standby -m owner --uid-owner 10064 -j DROP
  1159. -A fw_standby -m owner --uid-owner 10067 -j DROP
  1160. -A fw_standby -m owner --uid-owner 10072 -j DROP
  1161. -A fw_standby -m owner --uid-owner 10075 -j DROP
  1162. -A fw_standby -m owner --uid-owner 10078 -j DROP
  1163. -A fw_standby -m owner --uid-owner 10080 -j DROP
  1164. -A fw_standby -m owner --uid-owner 10081 -j DROP
  1165. -A fw_standby -m owner --uid-owner 10086 -j DROP
  1166. -A fw_standby -m owner --uid-owner 10091 -j DROP
  1167. -A fw_standby -m owner --uid-owner 10093 -j DROP
  1168. -A fw_standby -m owner --uid-owner 10095 -j DROP
  1169. -A fw_standby -m owner --uid-owner 10097 -j DROP
  1170. -A fw_standby -m owner --uid-owner 10098 -j DROP
  1171. -A fw_standby -m owner --uid-owner 10099 -j DROP
  1172. -A fw_standby -m owner --uid-owner 10109 -j DROP
  1173. -A fw_standby -m owner --uid-owner 10111 -j DROP
  1174. -A fw_standby -m owner --uid-owner 10112 -j DROP
  1175. -A fw_standby -m owner --uid-owner 10116 -j DROP
  1176. -A fw_standby -m owner --uid-owner 10117 -j DROP
  1177. -A fw_standby -m owner --uid-owner 10124 -j DROP
  1178. -A fw_standby -m owner --uid-owner 10126 -j DROP
  1179. -A fw_standby -m owner --uid-owner 10127 -j DROP
  1180. -A fw_standby -m owner --uid-owner 10128 -j DROP
  1181. -A fw_standby -m owner --uid-owner 10129 -j DROP
  1182. -A fw_standby -m owner --uid-owner 10130 -j DROP
  1183. -A fw_standby -m owner --uid-owner 10132 -j DROP
  1184. -A fw_standby -m owner --uid-owner 10133 -j DROP
  1185. -A fw_standby -m owner --uid-owner 10134 -j DROP
  1186. -A fw_standby -m owner --uid-owner 10135 -j DROP
  1187. -A fw_standby -m owner --uid-owner 10137 -j DROP
  1188. -A fw_standby -m owner --uid-owner 10140 -j DROP
  1189. -A fw_standby -m owner --uid-owner 10141 -j DROP
  1190. -A fw_standby -m owner --uid-owner 10143 -j DROP
  1191. -A fw_standby -m owner --uid-owner 10144 -j DROP
  1192. -A fw_standby -m owner --uid-owner 10146 -j DROP
  1193. -A fw_standby -m owner --uid-owner 10148 -j DROP
  1194. -A fw_standby -m owner --uid-owner 10149 -j DROP
  1195. -A fw_standby -m owner --uid-owner 10150 -j DROP
  1196. -A fw_standby -m owner --uid-owner 10153 -j DROP
  1197. -A fw_standby -m owner --uid-owner 10155 -j DROP
  1198. -A fw_standby -m owner --uid-owner 10160 -j DROP
  1199. -A fw_standby -m owner --uid-owner 10162 -j DROP
  1200. -A fw_standby -m owner --uid-owner 10163 -j DROP
  1201. -A fw_standby -m owner --uid-owner 10166 -j DROP
  1202. -A fw_standby -m owner --uid-owner 10168 -j DROP
  1203. -A fw_standby -m owner --uid-owner 10172 -j DROP
  1204. -A fw_standby -m owner --uid-owner 10174 -j DROP
  1205. -A fw_standby -m owner --uid-owner 10176 -j DROP
  1206. -A fw_standby -m owner --uid-owner 10178 -j DROP
  1207. -A fw_standby -m owner --uid-owner 10179 -j DROP
  1208. -A fw_standby -m owner --uid-owner 10180 -j DROP
  1209. -A fw_standby -m owner --uid-owner 10181 -j DROP
  1210. -A fw_standby -m owner --uid-owner 10182 -j DROP
  1211. -A fw_standby -m owner --uid-owner 10184 -j DROP
  1212. -A fw_standby -m owner --uid-owner 10185 -j DROP
  1213. -A fw_standby -m owner --uid-owner 10188 -j DROP
  1214. -A fw_standby -m owner --uid-owner 10189 -j DROP
  1215. -A fw_standby -m owner --uid-owner 10193 -j DROP
  1216. -A fw_standby -m owner --uid-owner 10194 -j DROP
  1217. -A fw_standby -m owner --uid-owner 10195 -j DROP
  1218. -A fw_standby -m owner --uid-owner 10196 -j DROP
  1219. -A fw_standby -m owner --uid-owner 10198 -j DROP
  1220. -A fw_standby -m owner --uid-owner 10199 -j DROP
  1221. -A fw_standby -m owner --uid-owner 10200 -j DROP
  1222. -A fw_standby -m owner --uid-owner 10201 -j DROP
  1223. -A fw_standby -m owner --uid-owner 10202 -j DROP
  1224. -A fw_standby -m owner --uid-owner 10203 -j DROP
  1225. -A fw_standby -m owner --uid-owner 10204 -j DROP
  1226. -A fw_standby -m owner --uid-owner 10205 -j DROP
  1227. -A fw_standby -m owner --uid-owner 10206 -j DROP
  1228. -A fw_standby -m owner --uid-owner 10208 -j DROP
  1229. -A fw_standby -m owner --uid-owner 10210 -j DROP
  1230. -A fw_standby -m owner --uid-owner 10212 -j DROP
  1231. -A fw_standby -m owner --uid-owner 10215 -j DROP
  1232. -A fw_standby -m owner --uid-owner 10216 -j DROP
  1233. -A fw_standby -m owner --uid-owner 10217 -j DROP
  1234. -A fw_standby -m owner --uid-owner 10218 -j DROP
  1235. -A fw_standby -m owner --uid-owner 10219 -j DROP
  1236. -A fw_standby -m owner --uid-owner 10221 -j DROP
  1237. -A fw_standby -m owner --uid-owner 10222 -j DROP
  1238. -A fw_standby -m owner --uid-owner 10223 -j DROP
  1239. -A fw_standby -m owner --uid-owner 10225 -j DROP
  1240. -A fw_standby -m owner --uid-owner 10227 -j DROP
  1241. -A fw_standby -m owner --uid-owner 10233 -j DROP
  1242. -A fw_standby -m owner --uid-owner 10234 -j DROP
  1243. -A fw_standby -m owner --uid-owner 10236 -j DROP
  1244. -A fw_standby -m owner --uid-owner 10239 -j DROP
  1245. -A fw_standby -m owner --uid-owner 10243 -j DROP
  1246. -A fw_standby -m owner --uid-owner 10245 -j DROP
  1247. -A fw_standby -m owner --uid-owner 10246 -j DROP
  1248. -A fw_standby -m owner --uid-owner 10247 -j DROP
  1249. -A fw_standby -m owner --uid-owner 10250 -j DROP
  1250. -A fw_standby -m owner --uid-owner 10251 -j DROP
  1251. -A fw_standby -m owner --uid-owner 10252 -j DROP
  1252. -A fw_standby -m owner --uid-owner 10253 -j DROP
  1253. -A fw_standby -m owner --uid-owner 10255 -j DROP
  1254. -A fw_standby -m owner --uid-owner 10152 -j DROP
  1255. -A fw_standby -m owner --uid-owner 10235 -j DROP
  1256. -A fw_standby -m owner --uid-owner 10125 -j DROP
  1257. -A fw_standby -m owner --uid-owner 10157 -j DROP
  1258. -A fw_standby -m owner --uid-owner 10048 -j DROP
  1259. -A fw_standby -m owner --uid-owner 10118 -j DROP
  1260. -A fw_standby -m owner --uid-owner 10105 -j DROP
  1261. -A fw_standby -m owner --uid-owner 10186 -j DROP
  1262. -A fw_standby -m owner --uid-owner 10192 -j DROP
  1263. -A fw_standby -m owner --uid-owner 10154 -j DROP
  1264. -A fw_standby -m owner --uid-owner 10015 -j DROP
  1265. -A fw_standby -m owner --uid-owner 10171 -j DROP
  1266. -A fw_standby -m owner --uid-owner 10138 -j DROP
  1267. -A fw_standby -m owner --uid-owner 10023 -j DROP
  1268. -A fw_standby -m owner --uid-owner 10191 -j DROP
  1269. -A fw_standby -m owner --uid-owner 10034 -j DROP
  1270. -A fw_standby -m owner --uid-owner 10156 -j DROP
  1271. -A fw_standby -m owner --uid-owner 10063 -j DROP
  1272. -A fw_standby -m owner --uid-owner 10190 -j DROP
  1273. -A fw_standby -m owner --uid-owner 10052 -j DROP
  1274. -A fw_standby -m owner --uid-owner 10131 -j DROP
  1275. -A fw_standby -m owner --uid-owner 10213 -j DROP
  1276. -A fw_standby -m owner --uid-owner 10214 -j DROP
  1277. -A fw_standby -m owner --uid-owner 10228 -j DROP
  1278. -A fw_standby -m owner --uid-owner 10261 -j DROP
  1279. -A fw_standby -m owner --uid-owner 10076 -j DROP
  1280. -A fw_standby -m owner --uid-owner 10254 -j DROP
  1281. -A nm_mdmprxy_doze_mode_skip -m mark --mark 0x8 -j ACCEPT
  1282. -A nm_mdmprxy_doze_mode_skip -m mark --mark 0x8 -j ACCEPT
  1283. -A nm_mdmprxy_doze_mode_skip -o r_rmnet_data0 -j ACCEPT
  1284. -A nm_mdmprxy_iface_pkt_fwder -i r_rmnet_data0 -o wlan0 -j ACCEPT
  1285. -A nm_mdmprxy_iface_pkt_fwder -i wlan0 -o r_rmnet_data0 -j ACCEPT
  1286. -A st_clear_detect -m connmark --mark 0x2000000/0x2000000 -j REJECT --reject-with icmp-port-unreachable
  1287. -A st_clear_detect -m connmark --mark 0x1000000/0x1000000 -j RETURN
  1288. -A st_clear_detect -p tcp -m u32 --u32 "0x0>>0x16&0x3c@0xc>>0x1a&0x3c@0x0&0xffff0000=0x16030000&&0x0>>0x16&0x3c@0xc>>0x1a&0x3c@0x4&0xff0000=0x10000" -j CONNMARK --set-xmark 0x1000000/0x1000000
  1289. -A st_clear_detect -p udp -m u32 --u32 "0x0>>0x16&0x3c@0x8&0xffff0000=0x16fe0000&&0x0>>0x16&0x3c@0x14&0xff0000=0x10000" -j CONNMARK --set-xmark 0x1000000/0x1000000
  1290. -A st_clear_detect -m connmark --mark 0x1000000/0x1000000 -j RETURN
  1291. -A st_clear_detect -p tcp -m state --state ESTABLISHED -m u32 --u32 "0x0>>0x16&0x3c@0xc>>0x1a&0x3c@0x0&0x0=0x0" -j st_clear_caught
  1292. -A st_clear_detect -p udp -j st_clear_caught
  1293. -A st_penalty_log -j CONNMARK --set-xmark 0x1000000/0x1000000
  1294. -A st_penalty_log -j NFLOG
  1295. -A st_penalty_reject -j CONNMARK --set-xmark 0x2000000/0x2000000
  1296. -A st_penalty_reject -j NFLOG
  1297. -A st_penalty_reject -j REJECT --reject-with icmp-port-unreachable
  1298. -A tetherctrl_FORWARD -j DROP
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!