1*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -s 192.168.0.0 -m comment --comment "A privatized IP block" 2*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT ip saddr 192.168.0.0 counter comment "A privatized IP block"' 3*a71a9546SAutomerger Merge Worker 4*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p tcp -m tcp --sport http -s 192.168.0.0/16 -d 192.168.0.0/16 -j LONGNACCEPT -m comment --comment "foobar" 5*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT ip saddr 192.168.0.0/16 ip daddr 192.168.0.0/16 tcp sport 80 counter jump LONGNACCEPT comment "foobar"' 6*a71a9546SAutomerger Merge Worker 7*a71a9546SAutomerger Merge Workeriptables-translate -A FORWARD -p tcp -m tcp --sport http -s 192.168.0.0/16 -d 192.168.0.0/16 -j DROP -m comment --comment singlecomment 8*a71a9546SAutomerger Merge Workernft 'add rule ip filter FORWARD ip saddr 192.168.0.0/16 ip daddr 192.168.0.0/16 tcp sport 80 counter drop comment "singlecomment"' 9