1*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p icmp -m length --length 86:0xffff -j DROP 2*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT ip protocol icmp meta length 86-65535 counter drop' 3*a71a9546SAutomerger Merge Worker 4*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p udp -m length --length :400 5*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT ip protocol udp meta length 0-400 counter' 6*a71a9546SAutomerger Merge Worker 7*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p udp -m length --length 40 8*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT ip protocol udp meta length 40 counter' 9*a71a9546SAutomerger Merge Worker 10*a71a9546SAutomerger Merge Workeriptables-translate -A INPUT -p udp -m length ! --length 40 11*a71a9546SAutomerger Merge Workernft 'add rule ip filter INPUT ip protocol udp meta length != 40 counter' 12