1*a71a9546SAutomerger Merge Workeriptables-translate -t nat -A OUTPUT -p tcp --dport 80 -m owner --uid-owner root -j ACCEPT 2*a71a9546SAutomerger Merge Workernft 'add rule ip nat OUTPUT tcp dport 80 skuid 0 counter accept' 3*a71a9546SAutomerger Merge Worker 4*a71a9546SAutomerger Merge Workeriptables-translate -t nat -A OUTPUT -p tcp --dport 80 -m owner --gid-owner 0-10 -j ACCEPT 5*a71a9546SAutomerger Merge Workernft 'add rule ip nat OUTPUT tcp dport 80 skgid 0-10 counter accept' 6*a71a9546SAutomerger Merge Worker 7*a71a9546SAutomerger Merge Workeriptables-translate -t nat -A OUTPUT -p tcp --dport 80 -m owner ! --uid-owner 1000 -j ACCEPT 8*a71a9546SAutomerger Merge Workernft 'add rule ip nat OUTPUT tcp dport 80 skuid != 1000 counter accept' 9