-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-N ACL_MAC
-N ARP
-N AUTH_EXPIRES
-N CONNLIMIT
-N DHCP_ACL
-N FIREWALL
-N FLOW_CONTROL
-N IKE_QOS
-N INPUT_ACL
-N IP_QOS
-N L2TP_QOS
-N LAN_VISIT
-N MAC_QOS
-N MINIUPNPD
-N NONAT
-N OVPN_QOS
-N PPP
-N PPPOE
-N PPPOE_QOS
-N PPTP_QOS
-N QOS
-N TUNNEL_DOWNLOAD_QOS
-N TUNNEL_UPLOAD_QOS
-N VNCACL
-N WEBACL
-N WEBAUTH
-N WEBAUTH_QOS
[fastid: 0] -A INPUT -j TUNNEL_DOWNLOAD_QOS
[fastid: 0] -A INPUT ! -i lo -p udp -m udp --dport 1701 -m policy --dir in --pol none -j DROP
[fastid: 0] -A INPUT -p udp -m set --match-set DROP_U_PORTS_WAN_IN dst -m ifaces --ifaces wan,vwan,adsl --dir in -j DROP
[fastid: 0] -A INPUT -p tcp -m set --match-set DROP_T_PORTS_WAN_IN dst -m ifaces --ifaces wan,vwan,adsl --dir in -j DROP
[fastid: 0] -A INPUT -j INPUT_ACL
[fastid: 0] -A INPUT -j WEBACL
[fastid: 0] -A INPUT -j VNCACL
[fastid: 0] -A INPUT -p udp -m udp --dport 67 -j DHCP_ACL
[fastid: 0] -A FORWARD -m ifaces --ifaces ppp --dir in -j AUTH_EXPIRES
[fastid: 0] -A FORWARD -j ACL_MAC
[fastid: 0] -A FORWARD -j CONNLIMIT
[fastid: 0] -A FORWARD -j QOS
[fastid: 0] -A FORWARD -j OVPN_QOS
[fastid: 0] -A FORWARD -j L2TP_QOS
[fastid: 0] -A FORWARD -j FIREWALL
[fastid: 0] -A FORWARD -j NONAT
[fastid: 0] -A OUTPUT -j TUNNEL_UPLOAD_QOS
[fastid: 0] -A AUTH_EXPIRES -p tcp -m set --match-set Linux_WEBTO_default src -m set ! --match-set Linux_WEBTO_whiteip dst -m urlroute  ! --urlroute pppauth -j REJECT --reject-with icmp-port-unreachable
[fastid: 0] -A AUTH_EXPIRES -p udp -m udp ! --dport 53 -m set --match-set Linux_WEBTO_default src -m set ! --match-set Linux_WEBTO_whiteip dst -m urlroute  ! --urlroute pppauth -j REJECT --reject-with icmp-port-unreachable
[fastid: 0] -A DHCP_ACL -p udp -m udp --dport 67 -m ifaces --ifaces lan,vlan --dir in -m set --match-set Linux_dhcp_aclmac_default src -j DROP
[fastid: 0] -A MINIUPNPD -d 198.18.0.1/32 -p udp -m udp --dport 8568 -j ACCEPT
[fastid: 0] -A MINIUPNPD -d 192.168.66.137/32 -p udp -m udp --dport 8567 -j ACCEPT
[fastid: 0] -A MINIUPNPD -d 192.168.66.55/32 -p tcp -m tcp --dport 44948 -j ACCEPT
[fastid: 0] -A MINIUPNPD -d 192.168.66.55/32 -p udp -m udp --dport 44948 -j ACCEPT
[fastid: 0] -A MINIUPNPD -d 192.168.66.150/32 -p tcp -m tcp --dport 53273 -j ACCEPT
[fastid: 0] -A MINIUPNPD -d 192.168.66.150/32 -p udp -m udp --dport 53273 -j ACCEPT
[fastid: 0] -A MINIUPNPD -d 192.168.68.104/32 -p udp -m udp --dport 8567 -j ACCEPT
[fastid: 0] -A MINIUPNPD -d 192.168.68.104/32 -p udp -m udp --dport 8496 -j ACCEPT
[fastid: 0] -A MINIUPNPD -d 192.168.68.105/32 -p udp -m udp --dport 8568 -j ACCEPT
[fastid: 0] -A MINIUPNPD -d 192.168.66.111/32 -p udp -m udp --dport 8567 -j ACCEPT
[fastid: 0] -A MINIUPNPD -d 192.168.66.111/32 -p udp -m udp --dport 8568 -j ACCEPT
[fastid: 0] -A MINIUPNPD -d 192.168.66.115/32 -p tcp -m tcp --dport 6881 -j ACCEPT
[fastid: 0] -A MINIUPNPD -d 192.168.66.115/32 -p udp -m udp --dport 6881 -j ACCEPT
[fastid: 0] -A MINIUPNPD -d 192.168.68.105/32 -p udp -m udp --dport 8567 -j ACCEPT
[fastid: 0] -A TUNNEL_DOWNLOAD_QOS -s 8.219.250.67/32 -p tcp -m tcp --sport 2222 -m bytesband--bytesband 500 --bytesband-name tunneldown  -j DROP
[fastid: 0] -A TUNNEL_UPLOAD_QOS -d 8.219.250.67/32 -p tcp -m tcp --dport 2222 -m bytesband--bytesband 200 --bytesband-name tunnelup  -j DROP
[fastid: 0] -A WEBACL -p tcp -m ifaces --ifaces wan,vwan,adsl --dir in -m set --match-set Linux_webport_default dst -j DROP
