1*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p dccp -m dccp --sport 100 2*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT dccp sport 100 counter' 3*a71a9546SAutomerger Merge Worker 4*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p dccp -m dccp --dport 100:200 5*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT dccp dport 100-200 counter' 6*a71a9546SAutomerger Merge Worker 7*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p dccp -m dccp ! --dport 100 8*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT dccp dport != 100 counter' 9*a71a9546SAutomerger Merge Worker 10*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p dccp -m dccp --dccp-types CLOSE 11*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT dccp type close counter' 12*a71a9546SAutomerger Merge Worker 13*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p dccp -m dccp --dccp-types INVALID 14*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT dccp type 10-15 counter' 15*a71a9546SAutomerger Merge Worker 16*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p dccp -m dccp --dport 100 --dccp-types REQUEST,RESPONSE,DATA,ACK,DATAACK,CLOSEREQ,CLOSE,SYNC,SYNCACK,INVALID 17*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT dccp dport 100 dccp type { request, response, data, ack, dataack, closereq, close, sync, syncack, 10-15 } counter' 18*a71a9546SAutomerger Merge Worker 19*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p dccp -m dccp --sport 200 --dport 100 20*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT dccp sport 200 dccp dport 100 counter' 21