2015-11-06 16:20:06 +03:00
iptables \
2020-11-17 03:20:53 +03:00
-w \
2015-11-06 16:20:06 +03:00
-A FJ-vnet0 \
-p esp \
-m mac \
--mac-source 01:02:03:04:05:06 \
--destination 10.1.2.3/32 \
-m dscp \
--dscp 2 \
2022-02-25 19:24:21 +03:00
-m conntrack \
--ctstate NEW,ESTABLISHED \
2022-02-25 19:28:32 +03:00
-m conntrack \
--ctdir Original \
2015-11-06 16:20:06 +03:00
-j RETURN
iptables \
2020-11-17 03:20:53 +03:00
-w \
2015-11-06 16:20:06 +03:00
-A FP-vnet0 \
-p esp \
--source 10.1.2.3/32 \
-m dscp \
--dscp 2 \
2022-02-25 19:24:21 +03:00
-m conntrack \
--ctstate ESTABLISHED \
2022-02-25 19:28:32 +03:00
-m conntrack \
--ctdir Reply \
2015-11-06 16:20:06 +03:00
-j ACCEPT
iptables \
2020-11-17 03:20:53 +03:00
-w \
2015-11-06 16:20:06 +03:00
-A HJ-vnet0 \
-p esp \
-m mac \
--mac-source 01:02:03:04:05:06 \
--destination 10.1.2.3/32 \
-m dscp \
--dscp 2 \
2022-02-25 19:24:21 +03:00
-m conntrack \
--ctstate NEW,ESTABLISHED \
2022-02-25 19:28:32 +03:00
-m conntrack \
--ctdir Original \
2015-11-06 16:20:06 +03:00
-j RETURN
iptables \
2020-11-17 03:20:53 +03:00
-w \
2015-11-06 16:20:06 +03:00
-A FJ-vnet0 \
-p esp \
--destination 10.1.2.3/22 \
-m dscp \
--dscp 33 \
2022-02-25 19:24:21 +03:00
-m conntrack \
--ctstate ESTABLISHED \
2022-02-25 19:28:32 +03:00
-m conntrack \
--ctdir Reply \
2015-11-06 16:20:06 +03:00
-j RETURN
iptables \
2020-11-17 03:20:53 +03:00
-w \
2015-11-06 16:20:06 +03:00
-A FP-vnet0 \
-p esp \
-m mac \
--mac-source 01:02:03:04:05:06 \
--source 10.1.2.3/22 \
-m dscp \
--dscp 33 \
2022-02-25 19:24:21 +03:00
-m conntrack \
--ctstate NEW,ESTABLISHED \
2022-02-25 19:28:32 +03:00
-m conntrack \
--ctdir Original \
2015-11-06 16:20:06 +03:00
-j ACCEPT
iptables \
2020-11-17 03:20:53 +03:00
-w \
2015-11-06 16:20:06 +03:00
-A HJ-vnet0 \
-p esp \
--destination 10.1.2.3/22 \
-m dscp \
--dscp 33 \
2022-02-25 19:24:21 +03:00
-m conntrack \
--ctstate ESTABLISHED \
2022-02-25 19:28:32 +03:00
-m conntrack \
--ctdir Reply \
2015-11-06 16:20:06 +03:00
-j RETURN
iptables \
2020-11-17 03:20:53 +03:00
-w \
2015-11-06 16:20:06 +03:00
-A FJ-vnet0 \
-p esp \
--destination 10.1.2.3/22 \
-m dscp \
--dscp 33 \
2022-02-25 19:24:21 +03:00
-m conntrack \
--ctstate ESTABLISHED \
2022-02-25 19:28:32 +03:00
-m conntrack \
--ctdir Reply \
2015-11-06 16:20:06 +03:00
-j RETURN
iptables \
2020-11-17 03:20:53 +03:00
-w \
2015-11-06 16:20:06 +03:00
-A FP-vnet0 \
-p esp \
-m mac \
--mac-source 01:02:03:04:05:06 \
--source 10.1.2.3/22 \
-m dscp \
--dscp 33 \
2022-02-25 19:24:21 +03:00
-m conntrack \
--ctstate NEW,ESTABLISHED \
2022-02-25 19:28:32 +03:00
-m conntrack \
--ctdir Original \
2015-11-06 16:20:06 +03:00
-j ACCEPT
iptables \
2020-11-17 03:20:53 +03:00
-w \
2015-11-06 16:20:06 +03:00
-A HJ-vnet0 \
-p esp \
--destination 10.1.2.3/22 \
-m dscp \
--dscp 33 \
2022-02-25 19:24:21 +03:00
-m conntrack \
--ctstate ESTABLISHED \
2022-02-25 19:28:32 +03:00
-m conntrack \
--ctdir Reply \
2015-11-06 16:20:06 +03:00
-j RETURN