1*a71a9546SAutomerger Merge Workerebtables-translate -A FORWARD -p ip --ip-src ! 192.168.0.0/24 -j ACCEPT 2*a71a9546SAutomerger Merge Workernft 'add rule bridge filter FORWARD ip saddr != 192.168.0.0/24 counter accept' 3*a71a9546SAutomerger Merge Worker 4*a71a9546SAutomerger Merge Workerebtables-translate -I FORWARD -p ip --ip-dst 10.0.0.1 5*a71a9546SAutomerger Merge Workernft 'insert rule bridge filter FORWARD ip daddr 10.0.0.1 counter' 6*a71a9546SAutomerger Merge Worker 7*a71a9546SAutomerger Merge Workerebtables-translate -I OUTPUT -p ip -o eth0 --ip-tos 0xff 8*a71a9546SAutomerger Merge Workernft 'insert rule bridge filter OUTPUT oifname "eth0" ether type ip @nh,8,8 0xff counter' 9*a71a9546SAutomerger Merge Worker 10*a71a9546SAutomerger Merge Workerebtables-translate -A FORWARD -p ip --ip-proto tcp --ip-dport 22 11*a71a9546SAutomerger Merge Workernft 'add rule bridge filter FORWARD ether type ip tcp dport 22 counter' 12*a71a9546SAutomerger Merge Worker 13*a71a9546SAutomerger Merge Workerebtables-translate -A FORWARD -p ip --ip-proto udp --ip-sport 1024:65535 14*a71a9546SAutomerger Merge Workernft 'add rule bridge filter FORWARD ether type ip udp sport 1024-65535 counter' 15*a71a9546SAutomerger Merge Worker 16*a71a9546SAutomerger Merge Workerebtables-translate -A FORWARD -p ip --ip-proto 253 17*a71a9546SAutomerger Merge Workernft 'add rule bridge filter FORWARD ip protocol 253 counter' 18*a71a9546SAutomerger Merge Worker 19*a71a9546SAutomerger Merge Workerebtables-translate -A FORWARD -p ip --ip-protocol icmp --ip-icmp-type "echo-request" 20*a71a9546SAutomerger Merge Workernft 'add rule bridge filter FORWARD icmp type 8 counter' 21*a71a9546SAutomerger Merge Worker 22*a71a9546SAutomerger Merge Workerebtables-translate -A FORWARD -p ip --ip-proto icmp --ip-icmp-type 1/1 23*a71a9546SAutomerger Merge Workernft 'add rule bridge filter FORWARD icmp type 1 icmp code 1 counter' 24*a71a9546SAutomerger Merge Worker 25*a71a9546SAutomerger Merge Workerebtables-translate -A FORWARD -p ip --ip-protocol icmp --ip-icmp-type ! 1:10 26*a71a9546SAutomerger Merge Workernft 'add rule bridge filter FORWARD icmp type != 1-10 counter' 27