1iptables-translate -A INPUT -m ecn --ecn-ip-ect 0 2nft 'add rule ip filter INPUT ip ecn not-ect counter' 3 4iptables-translate -A INPUT -m ecn --ecn-ip-ect 1 5nft 'add rule ip filter INPUT ip ecn ect1 counter' 6 7iptables-translate -A INPUT -m ecn --ecn-ip-ect 2 8nft 'add rule ip filter INPUT ip ecn ect0 counter' 9 10iptables-translate -A INPUT -m ecn --ecn-ip-ect 3 11nft 'add rule ip filter INPUT ip ecn ce counter' 12 13iptables-translate -A INPUT -m ecn ! --ecn-ip-ect 0 14nft 'add rule ip filter INPUT ip ecn != not-ect counter' 15 16iptables-translate -A INPUT -m ecn ! --ecn-ip-ect 1 17nft 'add rule ip filter INPUT ip ecn != ect1 counter' 18 19iptables-translate -A INPUT -m ecn ! --ecn-ip-ect 2 20nft 'add rule ip filter INPUT ip ecn != ect0 counter' 21 22iptables-translate -A INPUT -m ecn ! --ecn-ip-ect 3 23nft 'add rule ip filter INPUT ip ecn != ce counter' 24 25iptables-translate -A INPUT -m ecn ! --ecn-tcp-ece 26nft 'add rule ip filter INPUT tcp flags != ecn counter' 27 28iptables-translate -A INPUT -m ecn --ecn-tcp-cwr 29nft 'add rule ip filter INPUT tcp flags cwr counter' 30