# Generated by iptables-save v1.8.7 on Fri Sep  4 16:44:00 2026
*nat
:PREROUTING ACCEPT [1408361:295270109]
:INPUT ACCEPT [676183:68659872]
:OUTPUT ACCEPT [1321615:99864522]
:POSTROUTING ACCEPT [1321431:99851566]
:UBIOS_INPUT_JUMP - [0:0]
:UBIOS_OUTPUT_JUMP - [0:0]
:UBIOS_POSTROUTING_JUMP - [0:0]
:UBIOS_POSTROUTING_USER_HOOK - [0:0]
:UBIOS_PREROUTING_JUMP - [0:0]
:UBIOS_WF_PRE_JUMP - [0:0]
[6446947:1358190892] -A PREROUTING -j UBIOS_PREROUTING_JUMP
[2994992:312220799] -A INPUT -j UBIOS_INPUT_JUMP
[5852286:446235955] -A OUTPUT -j UBIOS_OUTPUT_JUMP
[8575995:1405188817] -A POSTROUTING -j UBIOS_POSTROUTING_JUMP
[1907920:308810046] -A UBIOS_POSTROUTING_JUMP -j UBIOS_POSTROUTING_USER_HOOK
[266094:93222901] -A UBIOS_POSTROUTING_USER_HOOK -o eth8 -m set ! --match-set UBIOS_ALL_ADDRv4_eth8 src -m state --state NEW -m limit --limit 50/sec --limit-burst 100 -j NFLOG --nflog-prefix  "684f161525f52a3a67ca72f9;PREDEFINED_MASQUERADE;NONE" --nflog-group 1 --nflog-threshold 16
[1416230:412512912] -A UBIOS_POSTROUTING_USER_HOOK -o eth8 -m set ! --match-set UBIOS_ALL_ADDRv4_eth8 src -m comment --comment 00000001095216660481 -j MASQUERADE
[320395:115735579] -A UBIOS_POSTROUTING_USER_HOOK -o eth7 -m set ! --match-set UBIOS_ALL_ADDRv4_eth7 src -m state --state NEW -m limit --limit 50/sec --limit-burst 100 -j NFLOG --nflog-prefix  "684f161525f52a3a67ca72f8;PREDEFINED_MASQUERADE;NONE" --nflog-group 1 --nflog-threshold 16
[1307812:546465236] -A UBIOS_POSTROUTING_USER_HOOK -o eth7 -m set ! --match-set UBIOS_ALL_ADDRv4_eth7 src -m comment --comment 00000001095216660482 -j MASQUERADE
[1408360:295270046] -A UBIOS_PREROUTING_JUMP -j UBIOS_WF_PRE_JUMP
[11701:1131249] -A UBIOS_WF_PRE_JUMP -i eth7 -j RETURN
[9381:1880245] -A UBIOS_WF_PRE_JUMP -i eth8 -j RETURN
[0:0] -A UBIOS_WF_PRE_JUMP -p udp -m udp --dport 53 -m addrtype --dst-type LOCAL -m mark --mark 0x1c0000/0x7e0000 -j REDIRECT --to-ports 20202
[0:0] -A UBIOS_WF_PRE_JUMP -p tcp -m tcp --dport 53 -m addrtype --dst-type LOCAL -m mark --mark 0x1c0000/0x7e0000 -j REDIRECT --to-ports 20202
[0:0] -A UBIOS_WF_PRE_JUMP -p udp -m udp --dport 53 -m addrtype --dst-type LOCAL -m mark --mark 0x1a0000/0x7e0000 -j REDIRECT --to-ports 20201
[0:0] -A UBIOS_WF_PRE_JUMP -p tcp -m tcp --dport 53 -m addrtype --dst-type LOCAL -m mark --mark 0x1a0000/0x7e0000 -j REDIRECT --to-ports 20201
COMMIT
# Completed on Fri Sep  4 16:44:00 2026
# Generated by iptables-save v1.8.7 on Fri Sep  4 16:44:00 2026
*mangle
:PREROUTING ACCEPT [833591748:938712397563]
:INPUT ACCEPT [49796553:103373687793]
:FORWARD ACCEPT [783187529:835262790222]
:OUTPUT ACCEPT [42501688:103745548976]
:POSTROUTING ACCEPT [825830386:939013374546]
:UBIOS_DNSSNIFF_OUTPUT - [0:0]
:UBIOS_DNSSNIFF_PREROUTING - [0:0]
:UBIOS_FORWARD_JUMP - [0:0]
:UBIOS_FORWARD_TCPMSS - [0:0]
:UBIOS_FORWARD_USER_HOOK - [0:0]
:UBIOS_INPUT_JUMP - [0:0]
:UBIOS_INPUT_USER_HOOK - [0:0]
:UBIOS_OUTPUT_JUMP - [0:0]
:UBIOS_OUTPUT_TCPMSS - [0:0]
:UBIOS_OUTPUT_USER_HOOK - [0:0]
:UBIOS_POSTROUTING_JUMP - [0:0]
:UBIOS_POSTROUTING_USER_HOOK - [0:0]
:UBIOS_PREROUTING_JUMP - [0:0]
:UBIOS_PREROUTING_USER_HOOK - [0:0]
:UBIOS_WF_GROUP_1_RANDOMWEIGH - [0:0]
:UBIOS_WF_IFACE_ETH7 - [0:0]
:UBIOS_WF_IFACE_ETH8 - [0:0]
:UBIOS_WF_IN_WANS - [0:0]
:UBIOS_WF_OUT_JUMP - [0:0]
:UBIOS_WF_OUT_WANS - [0:0]
:UBIOS_WF_PRE_JUMP - [0:0]
:UBIOS_WF_RESTORE_MARK - [0:0]
[833591966:938712496770] -A PREROUTING -j UBIOS_PREROUTING_JUMP
[49796604:103373691878] -A INPUT -j UBIOS_INPUT_JUMP
[783187694:835262885240] -A FORWARD -j UBIOS_FORWARD_JUMP
[42501704:103745550028] -A OUTPUT -j UBIOS_OUTPUT_JUMP
[825830568:939013470840] -A POSTROUTING -j UBIOS_POSTROUTING_JUMP
[40388:2953083] -A UBIOS_DNSSNIFF_OUTPUT -p tcp -m tcp --dport 53 -m tcp --tcp-flags FIN,SYN,RST NONE -m addrtype ! --dst-type LOCAL -j NFLOG --nflog-group 4
[1206272:85370207] -A UBIOS_DNSSNIFF_OUTPUT -p udp -m udp --dport 53 -m state --state NEW -m addrtype ! --dst-type LOCAL -j NFLOG --nflog-group 4
[97483:5036886] -A UBIOS_DNSSNIFF_PREROUTING -p tcp -m tcp --dport 53 -m tcp --tcp-flags FIN,SYN,RST NONE -m addrtype ! --src-type LOCAL -j NFLOG --nflog-group 4
[468433:33253573] -A UBIOS_DNSSNIFF_PREROUTING -p udp -m udp --dport 53 -m state --state NEW -m addrtype ! --src-type LOCAL -j NFLOG --nflog-group 4
[146092147:153786381227] -A UBIOS_FORWARD_JUMP -j UBIOS_FORWARD_TCPMSS
[11432029:29647553001] -A UBIOS_OUTPUT_JUMP -j UBIOS_DNSSNIFF_OUTPUT
[11432029:29647553001] -A UBIOS_OUTPUT_JUMP -j UBIOS_WF_OUT_JUMP
[11432029:29647553001] -A UBIOS_OUTPUT_JUMP -j UBIOS_OUTPUT_TCPMSS
[158953021:182446345339] -A UBIOS_PREROUTING_JUMP -j UBIOS_DNSSNIFF_PREROUTING
[158953021:182446345339] -A UBIOS_PREROUTING_JUMP -j UBIOS_WF_PRE_JUMP
[165159143:211186941767] -A UBIOS_WF_GROUP_1_RANDOMWEIGH -m state ! --state NEW -j RETURN
[437044:31061198] -A UBIOS_WF_GROUP_1_RANDOMWEIGH -p udp -m udp --dport 53 -m addrtype --dst-type LOCAL -j RETURN
[25221:1314360] -A UBIOS_WF_GROUP_1_RANDOMWEIGH -p tcp -m tcp --dport 53 -m addrtype --dst-type LOCAL -j RETURN
[603641:143581065] -A UBIOS_WF_GROUP_1_RANDOMWEIGH -m mark --mark 0x0/0x7e0000 -m dyn_random --prob-name "eth7-wf-group-1-randomweight" -j MARK --set-xmark 0x1c0000/0x7e0000
[442041:131541730] -A UBIOS_WF_GROUP_1_RANDOMWEIGH -m mark --mark 0x0/0x7e0000 -m dyn_random --prob-name "eth8-wf-group-1-randomweight" -j MARK --set-xmark 0x1a0000/0x7e0000
[4763642:874581015] -A UBIOS_WF_GROUP_1_RANDOMWEIGH -m mark ! --mark 0x0/0x7e0000 -j CONNMARK --save-mark --nfmask 0x7e0000 --ctmask 0x7e0000
[4763642:874581015] -A UBIOS_WF_GROUP_1_RANDOMWEIGH -j RETURN
[11926:1146435] -A UBIOS_WF_IFACE_ETH7 -j MARK --set-xmark 0x1c0000/0x7e0000
[11926:1146435] -A UBIOS_WF_IFACE_ETH7 -m mark ! --mark 0x0/0x7e0000 -j CONNMARK --save-mark --nfmask 0x7e0000 --ctmask 0x7e0000
[11926:1146435] -A UBIOS_WF_IFACE_ETH7 -j RETURN
[1206728:86781668] -A UBIOS_WF_IFACE_ETH8 -j MARK --set-xmark 0x1a0000/0x7e0000
[1206728:86781668] -A UBIOS_WF_IFACE_ETH8 -m mark ! --mark 0x0/0x7e0000 -j CONNMARK --save-mark --nfmask 0x7e0000 --ctmask 0x7e0000
[1206728:86781668] -A UBIOS_WF_IFACE_ETH8 -j RETURN
[155162406:181652607966] -A UBIOS_WF_IN_WANS -m state ! --state NEW -j RETURN
[11701:1131249] -A UBIOS_WF_IN_WANS -i eth7 -j UBIOS_WF_IFACE_ETH7
[9381:1880245] -A UBIOS_WF_IN_WANS -i eth8 -j UBIOS_WF_IFACE_ETH8
[11432029:29647553001] -A UBIOS_WF_OUT_JUMP -j UBIOS_WF_RESTORE_MARK
[11432029:29647553001] -A UBIOS_WF_OUT_JUMP -j UBIOS_WF_OUT_WANS
[11432029:29647553001] -A UBIOS_WF_OUT_JUMP -j UBIOS_WF_GROUP_1_RANDOMWEIGH
[9996737:29534333801] -A UBIOS_WF_OUT_WANS -m state ! --state NEW -j RETURN
[140229:14693184] -A UBIOS_WF_OUT_WANS -m mark ! --mark 0x0/0x7e0000 -j RETURN
[225:15186] -A UBIOS_WF_OUT_WANS -s 96.79.95.101/32 -j UBIOS_WF_IFACE_ETH7
[1197347:84901423] -A UBIOS_WF_OUT_WANS -s 10.1.10.180/32 -j UBIOS_WF_IFACE_ETH8
[158953021:182446345339] -A UBIOS_WF_PRE_JUMP -j UBIOS_WF_RESTORE_MARK
[158953021:182446345339] -A UBIOS_WF_PRE_JUMP -j UBIOS_WF_IN_WANS
[158953021:182446345339] -A UBIOS_WF_PRE_JUMP -j UBIOS_WF_GROUP_1_RANDOMWEIGH
[3584475:499506557] -A UBIOS_WF_RESTORE_MARK -m connmark --mark 0x0/0x7e0000 -j RETURN
[166800575:211594391783] -A UBIOS_WF_RESTORE_MARK -j CONNMARK --restore-mark --nfmask 0x7e0000 --ctmask 0x7e0000
COMMIT
# Completed on Fri Sep  4 16:44:00 2026
# Generated by iptables-save v1.8.7 on Fri Sep  4 16:44:00 2026
*filter
:INPUT ACCEPT [49618150:103359313233]
:FORWARD ACCEPT [783187583:835262765095]
:OUTPUT ACCEPT [42501670:103745547460]
:UBIOS_DNS_PBR_JUMP - [0:0]
:UBIOS_FORWARD_IN_USER - [0:0]
:UBIOS_FORWARD_JUMP - [0:0]
:UBIOS_FORWARD_OUT_USER - [0:0]
:UBIOS_FORWARD_USER_HOOK - [0:0]
:UBIOS_INPUT_JUMP - [0:0]
:UBIOS_INPUT_USER_HOOK - [0:0]
:UBIOS_IN_GEOIP - [0:0]
:UBIOS_LAN_IN_USER - [0:0]
:UBIOS_LAN_LOCAL_USER - [0:0]
:UBIOS_LAN_OUT_USER - [0:0]
:UBIOS_OUTPUT_JUMP - [0:0]
:UBIOS_OUTPUT_USER_HOOK - [0:0]
:UBIOS_OUT_GEOIP - [0:0]
:UBIOS_WAN_IN_USER - [0:0]
:UBIOS_WAN_LOCAL_USER - [0:0]
:UBIOS_WAN_OUT_USER - [0:0]
[49796604:103373691878] -A INPUT -j UBIOS_INPUT_JUMP
[783187694:835262885240] -A FORWARD -j UBIOS_FORWARD_JUMP
[42501672:103745547596] -A OUTPUT -j UBIOS_OUTPUT_JUMP
[998146:93156697] -A UBIOS_DNS_PBR_JUMP -i eth7 -j RETURN
[1412099:228911084] -A UBIOS_DNS_PBR_JUMP -i eth8 -j RETURN
[0:0] -A UBIOS_DNS_PBR_JUMP -p udp -m udp --dport 20202 -m addrtype --dst-type LOCAL -m mark --mark 0x1c0000/0x7e0000 -j ACCEPT
[0:0] -A UBIOS_DNS_PBR_JUMP -p tcp -m tcp --dport 20202 -m addrtype --dst-type LOCAL -m mark --mark 0x1c0000/0x7e0000 -j ACCEPT
[0:0] -A UBIOS_DNS_PBR_JUMP -p udp -m udp --dport 20201 -m addrtype --dst-type LOCAL -m mark --mark 0x1a0000/0x7e0000 -j ACCEPT
[0:0] -A UBIOS_DNS_PBR_JUMP -p tcp -m tcp --dport 20201 -m addrtype --dst-type LOCAL -m mark --mark 0x1a0000/0x7e0000 -j ACCEPT
[0:0] -A UBIOS_DNS_PBR_JUMP -p udp -m udp --dport 53 -m addrtype --dst-type LOCAL -m mark --mark 0x10000/0x10000 -j DROP
[0:0] -A UBIOS_DNS_PBR_JUMP -p tcp -m tcp --dport 53 -m addrtype --dst-type LOCAL -m mark --mark 0x10000/0x10000 -j DROP
[273323377:368813522932] -A UBIOS_FORWARD_IN_USER -i eth8 -m comment --comment 00000001095216690481 -j UBIOS_WAN_IN_USER
[290937802:400582050228] -A UBIOS_FORWARD_IN_USER -i eth7 -m comment --comment 00000001095216690482 -j UBIOS_WAN_IN_USER
[218926404:65867191935] -A UBIOS_FORWARD_IN_USER -i br0 -m comment --comment 00000001095216690483 -j UBIOS_LAN_IN_USER
[0:0] -A UBIOS_FORWARD_IN_USER -i br4001 -m comment --comment 00000001095216690484 -j UBIOS_LAN_IN_USER
[146091978:153786238251] -A UBIOS_FORWARD_JUMP -j UBIOS_FORWARD_USER_HOOK
[97200079:25019044979] -A UBIOS_FORWARD_OUT_USER -o eth8 -m comment --comment 00000001095216690481 -j UBIOS_WAN_OUT_USER
[121716439:40847672428] -A UBIOS_FORWARD_OUT_USER -o eth7 -m comment --comment 00000001095216690482 -j UBIOS_WAN_OUT_USER
[564271065:769396047688] -A UBIOS_FORWARD_OUT_USER -o br0 -m comment --comment 00000001095216690483 -j UBIOS_LAN_OUT_USER
[0:0] -A UBIOS_FORWARD_OUT_USER -o br4001 -m comment --comment 00000001095216690484 -j UBIOS_LAN_OUT_USER
[783187583:835262765095] -A UBIOS_FORWARD_USER_HOOK -m comment --comment 00000001095216690481 -j UBIOS_FORWARD_IN_USER
[783187583:835262765095] -A UBIOS_FORWARD_USER_HOOK -m comment --comment 00000001095216690482 -j UBIOS_FORWARD_OUT_USER
[12726774:28643613444] -A UBIOS_INPUT_JUMP -j UBIOS_DNS_PBR_JUMP
[12726774:28643613444] -A UBIOS_INPUT_JUMP -j UBIOS_INPUT_USER_HOOK
[0:0] -A UBIOS_INPUT_USER_HOOK -i tlprt+ -m comment --comment 00000001095216670481 -j UBIOS_LAN_LOCAL_USER
[6180888:1125190991] -A UBIOS_INPUT_USER_HOOK -i eth8 -m comment --comment 00000001095216690481 -j UBIOS_WAN_LOCAL_USER
[2532842:225844568] -A UBIOS_INPUT_USER_HOOK -i eth7 -m comment --comment 00000001095216690482 -j UBIOS_WAN_LOCAL_USER
[17785560:4469320715] -A UBIOS_INPUT_USER_HOOK -i br0 -m comment --comment 00000001095216690483 -j UBIOS_LAN_LOCAL_USER
[41834:1493961] -A UBIOS_INPUT_USER_HOOK -i br4001 -m comment --comment 00000001095216690484 -j UBIOS_LAN_LOCAL_USER
[0:0] -A UBIOS_LAN_IN_USER -m set --match-set UBIOS_blocked_clients_in_61afad src -m comment --comment 00000001095216670480 -j DROP
[0:0] -A UBIOS_LAN_IN_USER -m set --match-set UBIOS_ALL_NETv4_br4001 src -m set --match-set UBIOS_ALL_NETv4_br0 dst -m comment --comment 00000001095216680480 -j RETURN
[0:0] -A UBIOS_LAN_IN_USER -s 192.168.254.0/24 -m comment --comment 00000001095216720481 -j RETURN
[218924866:65867109029] -A UBIOS_LAN_IN_USER -s 10.5.12.0/22 -m comment --comment 00000001095216720482 -j RETURN
[1538:82906] -A UBIOS_LAN_IN_USER -m comment --comment 00000001097364144127 -j RETURN
[0:0] -A UBIOS_LAN_LOCAL_USER -m set --match-set UBIOS_blocked_clients_in_61afad src -m comment --comment 00000001095216670480 -j DROP
[17827394:4470814676] -A UBIOS_LAN_LOCAL_USER -m comment --comment 00000001097364144127 -j RETURN
[0:0] -A UBIOS_LAN_OUT_USER -d 192.168.254.0/24 -m comment --comment 00000001095216720481 -j RETURN
[564271065:769396047688] -A UBIOS_LAN_OUT_USER -d 10.5.12.0/22 -m comment --comment 00000001095216720482 -j RETURN
[0:0] -A UBIOS_LAN_OUT_USER -m comment --comment 00000001097364144127 -j RETURN
[564261179:769395573160] -A UBIOS_WAN_IN_USER -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment 00000001095216690481 -j RETURN
[0:0] -A UBIOS_WAN_IN_USER -m conntrack --ctstate INVALID -m comment --comment 00000001095216690482 -j DROP
[0:0] -A UBIOS_WAN_IN_USER -m comment --comment 00000001097364144127 -j DROP
[8535280:1336657154] -A UBIOS_WAN_LOCAL_USER -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment 00000001095216690481 -j RETURN
[49600:2954402] -A UBIOS_WAN_LOCAL_USER -m conntrack --ctstate INVALID -m comment --comment 00000001095216690482 -j DROP
[128850:11424003] -A UBIOS_WAN_LOCAL_USER -m comment --comment 00000001097364144127 -j DROP
[218916518:65866717407] -A UBIOS_WAN_OUT_USER -m comment --comment 00000001097364144127 -j RETURN
COMMIT
# Completed on Fri Sep  4 16:44:00 2026
