1*a71a9546SAutomerger Merge Workeriptables-translate -A OUTPUT -m connbytes --connbytes 200 --connbytes-dir original --connbytes-mode packets 2*a71a9546SAutomerger Merge Workernft 'add rule ip filter OUTPUT ct original packets ge 200 counter' 3*a71a9546SAutomerger Merge Worker 4*a71a9546SAutomerger Merge Workeriptables-translate -A OUTPUT -m connbytes ! --connbytes 200 --connbytes-dir reply --connbytes-mode packets 5*a71a9546SAutomerger Merge Workernft 'add rule ip filter OUTPUT ct reply packets lt 200 counter' 6*a71a9546SAutomerger Merge Worker 7*a71a9546SAutomerger Merge Workeriptables-translate -A OUTPUT -m connbytes --connbytes 200:600 --connbytes-dir both --connbytes-mode bytes 8*a71a9546SAutomerger Merge Workernft 'add rule ip filter OUTPUT ct bytes 200-600 counter' 9*a71a9546SAutomerger Merge Worker 10*a71a9546SAutomerger Merge Workeriptables-translate -A OUTPUT -m connbytes ! --connbytes 200:600 --connbytes-dir both --connbytes-mode bytes 11*a71a9546SAutomerger Merge Workernft 'add rule ip filter OUTPUT ct bytes != 200-600 counter' 12*a71a9546SAutomerger Merge Worker 13*a71a9546SAutomerger Merge Workeriptables-translate -A OUTPUT -m connbytes --connbytes 200:200 --connbytes-dir both --connbytes-mode avgpkt 14*a71a9546SAutomerger Merge Workernft 'add rule ip filter OUTPUT ct avgpkt 200 counter' 15