| family ipv4 { |
| table raw { |
| chain PREROUTING hook NF_INET_PRE_ROUTING prio -300 |
| chain OUTPUT hook NF_INET_LOCAL_OUT prio -300 |
| } |
| |
| table mangle { |
| chain PREROUTING hook NF_INET_PRE_ROUTING prio -150 |
| chain INPUT hook NF_INET_LOCAL_IN prio -150 |
| chain FORWARD hook NF_INET_FORWARD prio -150 |
| chain OUTPUT hook NF_INET_LOCAL_OUT prio -150 |
| chain POSTROUTING hook NF_INET_POST_ROUTING prio -150 |
| } |
| |
| table filter { |
| chain INPUT hook NF_INET_LOCAL_IN prio 0 |
| chain FORWARD hook NF_INET_FORWARD prio 0 |
| chain OUTPUT hook NF_INET_LOCAL_OUT prio 0 |
| } |
| |
| table nat { |
| chain PREROUTING hook NF_INET_PRE_ROUTING prio -100 |
| chain INPUT hook NF_INET_LOCAL_IN prio 100 |
| chain OUTPUT hook NF_INET_LOCAL_OUT prio -100 |
| chain POSTROUTING hook NF_INET_POST_ROUTING prio 100 |
| } |
| |
| table security { |
| chain INPUT hook NF_INET_LOCAL_IN prio 50 |
| chain FORWARD hook NF_INET_FORWARD prio 50 |
| chain OUTPUT hook NF_INET_LOCAL_OUT prio 50 |
| } |
| } |
| |
| family ipv6 { |
| table raw { |
| chain PREROUTING hook NF_INET_PRE_ROUTING prio -300 |
| chain OUTPUT hook NF_INET_LOCAL_OUT prio -300 |
| } |
| |
| table mangle { |
| chain PREROUTING hook NF_INET_PRE_ROUTING prio -150 |
| chain INPUT hook NF_INET_LOCAL_IN prio -150 |
| chain FORWARD hook NF_INET_FORWARD prio -150 |
| chain OUTPUT hook NF_INET_LOCAL_OUT prio -150 |
| chain POSTROUTING hook NF_INET_POST_ROUTING prio -150 |
| } |
| |
| table filter { |
| chain INPUT hook NF_INET_LOCAL_IN prio 0 |
| chain FORWARD hook NF_INET_FORWARD prio 0 |
| chain OUTPUT hook NF_INET_LOCAL_OUT prio 0 |
| } |
| |
| table nat { |
| chain PREROUTING hook NF_INET_PRE_ROUTING prio -100 |
| chain INPUT hook NF_INET_LOCAL_IN prio 100 |
| chain OUTPUT hook NF_INET_LOCAL_OUT prio -100 |
| chain POSTROUTING hook NF_INET_POST_ROUTING prio 100 |
| } |
| |
| table security { |
| chain INPUT hook NF_INET_LOCAL_IN prio 50 |
| chain FORWARD hook NF_INET_FORWARD prio 50 |
| chain OUTPUT hook NF_INET_LOCAL_OUT prio 50 |
| } |
| } |
| |
| family arp { |
| table filter { |
| chain INPUT hook NF_ARP_IN prio 0 |
| chain OUTPUT hook NF_ARP_OUT prio 0 |
| } |
| } |