# Generated by ip6tables-save v1.8.7 on Fri Sep  4 16:44:00 2026
*nat
:PREROUTING ACCEPT [40563:5557889]
:INPUT ACCEPT [1636:467838]
:OUTPUT ACCEPT [23871:1888357]
:POSTROUTING ACCEPT [23871:1888357]
:UBIOS_INPUT_JUMP - [0:0]
:UBIOS_OUTPUT_JUMP - [0:0]
:UBIOS_POSTROUTING_JUMP - [0:0]
:UBIOS_POSTROUTING_USER_HOOK - [0:0]
:UBIOS_PREROUTING_JUMP - [0:0]
:UBIOS_WF_PRE_JUMP - [0:0]
[137247:20493802] -A PREROUTING -j UBIOS_PREROUTING_JUMP
[8866:2549796] -A INPUT -j UBIOS_INPUT_JUMP
[98237:7760058] -A OUTPUT -j UBIOS_OUTPUT_JUMP
[98237:7760058] -A POSTROUTING -j UBIOS_POSTROUTING_JUMP
[23871:1888357] -A UBIOS_POSTROUTING_JUMP -j UBIOS_POSTROUTING_USER_HOOK
[40563:5557889] -A UBIOS_PREROUTING_JUMP -j UBIOS_WF_PRE_JUMP
[24:6768] -A UBIOS_WF_PRE_JUMP -i eth7 -j RETURN
[25:6598] -A UBIOS_WF_PRE_JUMP -i eth8 -j RETURN
[0:0] -A UBIOS_WF_PRE_JUMP -p udp -m udp --dport 53 -m addrtype --dst-type LOCAL -m mark --mark 0x1c0000/0x7e0000 -j REDIRECT --to-ports 20202
[0:0] -A UBIOS_WF_PRE_JUMP -p tcp -m tcp --dport 53 -m addrtype --dst-type LOCAL -m mark --mark 0x1c0000/0x7e0000 -j REDIRECT --to-ports 20202
[0:0] -A UBIOS_WF_PRE_JUMP -p udp -m udp --dport 53 -m addrtype --dst-type LOCAL -m mark --mark 0x1a0000/0x7e0000 -j REDIRECT --to-ports 20201
[0:0] -A UBIOS_WF_PRE_JUMP -p tcp -m tcp --dport 53 -m addrtype --dst-type LOCAL -m mark --mark 0x1a0000/0x7e0000 -j REDIRECT --to-ports 20201
COMMIT
# Completed on Fri Sep  4 16:44:00 2026
# Generated by ip6tables-save v1.8.7 on Fri Sep  4 16:44:00 2026
*mangle
:PREROUTING ACCEPT [826707:135525245]
:INPUT ACCEPT [558905:104288123]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [416062:81848985]
:POSTROUTING ACCEPT [416325:81881580]
:UBIOS_DNSSNIFF_OUTPUT - [0:0]
:UBIOS_DNSSNIFF_PREROUTING - [0:0]
:UBIOS_FORWARD_JUMP - [0:0]
:UBIOS_FORWARD_TCPMSS - [0:0]
:UBIOS_FORWARD_USER_HOOK - [0:0]
:UBIOS_INPUT_JUMP - [0:0]
:UBIOS_INPUT_USER_HOOK - [0:0]
:UBIOS_OUTPUT_JUMP - [0:0]
:UBIOS_OUTPUT_TCPMSS - [0:0]
:UBIOS_OUTPUT_USER_HOOK - [0:0]
:UBIOS_POSTROUTING_JUMP - [0:0]
:UBIOS_POSTROUTING_USER_HOOK - [0:0]
:UBIOS_PREROUTING_JUMP - [0:0]
:UBIOS_PREROUTING_USER_HOOK - [0:0]
:UBIOS_WF_GROUP_1_RANDOMWEIGH - [0:0]
:UBIOS_WF_IFACE_ETH7 - [0:0]
:UBIOS_WF_IFACE_ETH8 - [0:0]
:UBIOS_WF_IN_WANS - [0:0]
:UBIOS_WF_OUT_JUMP - [0:0]
:UBIOS_WF_OUT_WANS - [0:0]
:UBIOS_WF_PRE_JUMP - [0:0]
:UBIOS_WF_RESTORE_MARK - [0:0]
[826709:135525533] -A PREROUTING -j UBIOS_PREROUTING_JUMP
[558906:104288315] -A INPUT -j UBIOS_INPUT_JUMP
[0:0] -A FORWARD -j UBIOS_FORWARD_JUMP
[416082:81851057] -A OUTPUT -j UBIOS_OUTPUT_JUMP
[416345:81883768] -A POSTROUTING -j UBIOS_POSTROUTING_JUMP
[0:0] -A UBIOS_DNSSNIFF_OUTPUT -p tcp -m tcp --dport 53 -m tcp --tcp-flags FIN,SYN,RST NONE -m addrtype ! --dst-type LOCAL -j NFLOG --nflog-group 4
[0:0] -A UBIOS_DNSSNIFF_OUTPUT -p udp -m udp --dport 53 -m state --state NEW -m addrtype ! --dst-type LOCAL -j NFLOG --nflog-group 4
[0:0] -A UBIOS_DNSSNIFF_PREROUTING -p tcp -m tcp --dport 53 -m tcp --tcp-flags FIN,SYN,RST NONE -m addrtype ! --src-type LOCAL -j NFLOG --nflog-group 4
[0:0] -A UBIOS_DNSSNIFF_PREROUTING -p udp -m udp --dport 53 -m state --state NEW -m addrtype ! --src-type LOCAL -j NFLOG --nflog-group 4
[0:0] -A UBIOS_FORWARD_JUMP -j UBIOS_FORWARD_TCPMSS
[94687:17790394] -A UBIOS_OUTPUT_JUMP -j UBIOS_DNSSNIFF_OUTPUT
[94687:17790394] -A UBIOS_OUTPUT_JUMP -j UBIOS_WF_OUT_JUMP
[94687:17790394] -A UBIOS_OUTPUT_JUMP -j UBIOS_OUTPUT_TCPMSS
[193278:30371443] -A UBIOS_PREROUTING_JUMP -j UBIOS_DNSSNIFF_PREROUTING
[193278:30371443] -A UBIOS_PREROUTING_JUMP -j UBIOS_WF_PRE_JUMP
[199422:38801530] -A UBIOS_WF_GROUP_1_RANDOMWEIGH -m state ! --state NEW -j RETURN
[0:0] -A UBIOS_WF_GROUP_1_RANDOMWEIGH -p udp -m udp --dport 53 -m addrtype --dst-type LOCAL -j RETURN
[0:0] -A UBIOS_WF_GROUP_1_RANDOMWEIGH -p tcp -m tcp --dport 53 -m addrtype --dst-type LOCAL -j RETURN
[13871:2895291] -A UBIOS_WF_GROUP_1_RANDOMWEIGH -m mark --mark 0x0/0x7e0000 -m dyn_random --prob-name "eth7-wf-group-1-randomweight" -j MARK --set-xmark 0x1c0000/0x7e0000
[50514:4537589] -A UBIOS_WF_GROUP_1_RANDOMWEIGH -m mark --mark 0x0/0x7e0000 -m dyn_random --prob-name "eth8-wf-group-1-randomweight" -j MARK --set-xmark 0x1a0000/0x7e0000
[88543:9360307] -A UBIOS_WF_GROUP_1_RANDOMWEIGH -m mark ! --mark 0x0/0x7e0000 -j CONNMARK --save-mark --nfmask 0x7e0000 --ctmask 0x7e0000
[88543:9360307] -A UBIOS_WF_GROUP_1_RANDOMWEIGH -j RETURN
[24:6768] -A UBIOS_WF_IFACE_ETH7 -j MARK --set-xmark 0x1c0000/0x7e0000
[24:6768] -A UBIOS_WF_IFACE_ETH7 -m mark ! --mark 0x0/0x7e0000 -j CONNMARK --save-mark --nfmask 0x7e0000 --ctmask 0x7e0000
[24:6768] -A UBIOS_WF_IFACE_ETH7 -j RETURN
[25:6598] -A UBIOS_WF_IFACE_ETH8 -j MARK --set-xmark 0x1a0000/0x7e0000
[25:6598] -A UBIOS_WF_IFACE_ETH8 -m mark ! --mark 0x0/0x7e0000 -j CONNMARK --save-mark --nfmask 0x7e0000 --ctmask 0x7e0000
[25:6598] -A UBIOS_WF_IFACE_ETH8 -j RETURN
[128725:22912345] -A UBIOS_WF_IN_WANS -m state ! --state NEW -j RETURN
[24:6768] -A UBIOS_WF_IN_WANS -i eth7 -j UBIOS_WF_IFACE_ETH7
[25:6598] -A UBIOS_WF_IN_WANS -i eth8 -j UBIOS_WF_IFACE_ETH8
[94687:17790394] -A UBIOS_WF_OUT_JUMP -j UBIOS_WF_RESTORE_MARK
[94687:17790394] -A UBIOS_WF_OUT_JUMP -j UBIOS_WF_OUT_WANS
[94687:17790394] -A UBIOS_WF_OUT_JUMP -j UBIOS_WF_GROUP_1_RANDOMWEIGH
[70697:15889185] -A UBIOS_WF_OUT_WANS -m state ! --state NEW -j RETURN
[119:12852] -A UBIOS_WF_OUT_WANS -m mark ! --mark 0x0/0x7e0000 -j RETURN
[193278:30371443] -A UBIOS_WF_PRE_JUMP -j UBIOS_WF_RESTORE_MARK
[193278:30371443] -A UBIOS_WF_PRE_JUMP -j UBIOS_WF_IN_WANS
[193278:30371443] -A UBIOS_WF_PRE_JUMP -j UBIOS_WF_GROUP_1_RANDOMWEIGH
[64434:7446246] -A UBIOS_WF_RESTORE_MARK -m connmark --mark 0x0/0x7e0000 -j RETURN
[223531:40715591] -A UBIOS_WF_RESTORE_MARK -j CONNMARK --restore-mark --nfmask 0x7e0000 --ctmask 0x7e0000
COMMIT
# Completed on Fri Sep  4 16:44:00 2026
# Generated by ip6tables-save v1.8.7 on Fri Sep  4 16:44:00 2026
*filter
:INPUT ACCEPT [558899:104287971]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [416076:81850501]
:UBIOS_DNS_PBR_JUMP - [0:0]
:UBIOS_FORWARD_IN_USER - [0:0]
:UBIOS_FORWARD_JUMP - [0:0]
:UBIOS_FORWARD_OUT_USER - [0:0]
:UBIOS_FORWARD_USER_HOOK - [0:0]
:UBIOS_INPUT_JUMP - [0:0]
:UBIOS_INPUT_USER_HOOK - [0:0]
:UBIOS_IN_GEOIP - [0:0]
:UBIOS_LAN_IN_USER - [0:0]
:UBIOS_LAN_LOCAL_USER - [0:0]
:UBIOS_LAN_OUT_USER - [0:0]
:UBIOS_OUTPUT_JUMP - [0:0]
:UBIOS_OUTPUT_USER_HOOK - [0:0]
:UBIOS_OUT_GEOIP - [0:0]
:UBIOS_WAN_IN_USER - [0:0]
:UBIOS_WAN_LOCAL_USER - [0:0]
:UBIOS_WAN_OUT_USER - [0:0]
[558906:104288315] -A INPUT -j UBIOS_INPUT_JUMP
[0:0] -A FORWARD -j UBIOS_FORWARD_JUMP
[416076:81850501] -A OUTPUT -j UBIOS_OUTPUT_JUMP
[14194:2492880] -A UBIOS_DNS_PBR_JUMP -i eth7 -j RETURN
[14198:1703552] -A UBIOS_DNS_PBR_JUMP -i eth8 -j RETURN
[0:0] -A UBIOS_DNS_PBR_JUMP -p udp -m udp --dport 20202 -m addrtype --dst-type LOCAL -m mark --mark 0x1c0000/0x7e0000 -j ACCEPT
[0:0] -A UBIOS_DNS_PBR_JUMP -p tcp -m tcp --dport 20202 -m addrtype --dst-type LOCAL -m mark --mark 0x1c0000/0x7e0000 -j ACCEPT
[0:0] -A UBIOS_DNS_PBR_JUMP -p udp -m udp --dport 20201 -m addrtype --dst-type LOCAL -m mark --mark 0x1a0000/0x7e0000 -j ACCEPT
[0:0] -A UBIOS_DNS_PBR_JUMP -p tcp -m tcp --dport 20201 -m addrtype --dst-type LOCAL -m mark --mark 0x1a0000/0x7e0000 -j ACCEPT
[0:0] -A UBIOS_DNS_PBR_JUMP -p udp -m udp --dport 53 -m addrtype --dst-type LOCAL -m mark --mark 0x10000/0x10000 -j DROP
[0:0] -A UBIOS_DNS_PBR_JUMP -p tcp -m tcp --dport 53 -m addrtype --dst-type LOCAL -m mark --mark 0x10000/0x10000 -j DROP
[0:0] -A UBIOS_FORWARD_IN_USER -i eth8 -m comment --comment 00000001095216690481 -j UBIOS_WAN_IN_USER
[0:0] -A UBIOS_FORWARD_IN_USER -i eth7 -m comment --comment 00000001095216690482 -j UBIOS_WAN_IN_USER
[0:0] -A UBIOS_FORWARD_IN_USER -i br0 -m comment --comment 00000001095216690483 -j UBIOS_LAN_IN_USER
[0:0] -A UBIOS_FORWARD_IN_USER -i br4001 -m comment --comment 00000001095216690484 -j UBIOS_LAN_IN_USER
[0:0] -A UBIOS_FORWARD_JUMP -j UBIOS_FORWARD_USER_HOOK
[0:0] -A UBIOS_FORWARD_OUT_USER -o eth8 -m comment --comment 00000001095216690481 -j UBIOS_WAN_OUT_USER
[0:0] -A UBIOS_FORWARD_OUT_USER -o eth7 -m comment --comment 00000001095216690482 -j UBIOS_WAN_OUT_USER
[0:0] -A UBIOS_FORWARD_OUT_USER -o br0 -m comment --comment 00000001095216690483 -j UBIOS_LAN_OUT_USER
[0:0] -A UBIOS_FORWARD_OUT_USER -o br4001 -m comment --comment 00000001095216690484 -j UBIOS_LAN_OUT_USER
[0:0] -A UBIOS_FORWARD_USER_HOOK -m comment --comment 00000001095216690481 -j UBIOS_FORWARD_IN_USER
[0:0] -A UBIOS_FORWARD_USER_HOOK -m comment --comment 00000001095216690482 -j UBIOS_FORWARD_OUT_USER
[124564:22443728] -A UBIOS_INPUT_JUMP -j UBIOS_DNS_PBR_JUMP
[124564:22443728] -A UBIOS_INPUT_JUMP -j UBIOS_INPUT_USER_HOOK
[0:0] -A UBIOS_INPUT_USER_HOOK -i tlprt+ -m comment --comment 00000001095216670481 -j UBIOS_LAN_LOCAL_USER
[67344:8080484] -A UBIOS_INPUT_USER_HOOK -i eth8 -m comment --comment 00000001095216690481 -j UBIOS_WAN_LOCAL_USER
[67366:11831942] -A UBIOS_INPUT_USER_HOOK -i eth7 -m comment --comment 00000001095216690482 -j UBIOS_WAN_LOCAL_USER
[74006:7171278] -A UBIOS_INPUT_USER_HOOK -i br0 -m comment --comment 00000001095216690483 -j UBIOS_LAN_LOCAL_USER
[235:26631] -A UBIOS_INPUT_USER_HOOK -i br4001 -m comment --comment 00000001095216690484 -j UBIOS_LAN_LOCAL_USER
[0:0] -A UBIOS_LAN_IN_USER -m set --match-set UBIOS_blocked_clients_in_61afad src -m comment --comment 00000001095216670480 -j DROP
[0:0] -A UBIOS_LAN_IN_USER -m comment --comment 00000001097364144126 -j RETURN
[0:0] -A UBIOS_LAN_LOCAL_USER -m set --match-set UBIOS_blocked_clients_in_61afad src -m comment --comment 00000001095216670480 -j DROP
[74241:7197909] -A UBIOS_LAN_LOCAL_USER -m comment --comment 00000001097364144126 -j RETURN
[0:0] -A UBIOS_LAN_OUT_USER -m set --match-set UBIOS_corporate_networkv6 dst -m comment --comment 00000001095216720483 -j RETURN
[0:0] -A UBIOS_LAN_OUT_USER -m comment --comment 00000001097364144126 -j RETURN
[0:0] -A UBIOS_WAN_IN_USER -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment 00000001095216690483 -j RETURN
[0:0] -A UBIOS_WAN_IN_USER -m conntrack --ctstate INVALID -m comment --comment 00000001095216690484 -j DROP
[0:0] -A UBIOS_WAN_IN_USER -m comment --comment 00000001097364144126 -j DROP
[0:0] -A UBIOS_WAN_LOCAL_USER -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment 00000001095216690483 -j RETURN
[0:0] -A UBIOS_WAN_LOCAL_USER -m conntrack --ctstate INVALID -m comment --comment 00000001095216690484 -j DROP
[225:16200] -A UBIOS_WAN_LOCAL_USER -p ipv6-icmp -m icmp6 --icmpv6-type 135 -m comment --comment 00000001095216690485 -j RETURN
[446:30336] -A UBIOS_WAN_LOCAL_USER -p ipv6-icmp -m icmp6 --icmpv6-type 136 -m comment --comment 00000001095216690486 -j RETURN
[222:61050] -A UBIOS_WAN_LOCAL_USER -s fe80::/10 -p udp -m udp --dport 546 -m comment --comment 00000000008589964599 -j RETURN
[0:0] -A UBIOS_WAN_LOCAL_USER -p udp -m udp --sport 547 --dport 546 -m comment --comment 00000000008589964600 -j RETURN
[133810:19804496] -A UBIOS_WAN_LOCAL_USER -p ipv6-icmp -m icmp6 --icmpv6-type 134 -m comment --comment 00000001095216690489 -j RETURN
[7:344] -A UBIOS_WAN_LOCAL_USER -m comment --comment 00000001097364144126 -j DROP
[0:0] -A UBIOS_WAN_OUT_USER -m comment --comment 00000001097364144126 -j RETURN
COMMIT
# Completed on Fri Sep  4 16:44:00 2026
