how fast traffic can RPi4B filter
Hi,
Last weekend, I replaced my router in my home as the old one
showed hard disk health warnings.
In short, by using /etc/nftables.conf, RPi4B seems able to filter packets
at 600 Mbits/sec, where %irq of "atop" reaches 90% and M=1,000,000.
Packet processing capability depends on the complexity of tasks.
The router tunnels IPv4 packets over IPv6 by MAP-E (*).
MAP-E consists of two steps:
(1) IPv4 NAPT (Network Address and Port Translation)
(2) Tunneling (e.g. by ip -6 tunnel add $TUNDEV mode ip4ip6 remote $BR local $CE dev $WANDEV encaplimit none)
As the sets of usable ports by NAPT are discontinuous in MAP-E,
the filtering rule is very complex (attached at the bottom),
nonetheless, RPi4B is able to handle packets
at a satisfactory speed, which is a surprise.
(*) Explanations of MAP-E:
https://en.wikipedia.org/wiki/Mapping_of_Address_and_Port or
https://www.slideshare.net/akiranakagawa3/20150304-apricot2015apnicfukuoka
Best regards, Ryutaroh Matsumoto
/etc/nftables.conf:
#!/usr/sbin/nft -f
flush ruleset
table ip my_notrack {
chain PREROUTING {
type filter hook prerouting priority raw;
ip saddr 192.168.1.0/24 ip daddr 192.168.1.2 notrack
ip saddr 192.168.1.2 ip daddr 192.168.1.0/24 notrack
}
}
table inet map_e_filter {
chain PREROUTING {
type filter hook prerouting priority filter;
iifname ip6tnl1 meta nfproto ipv6 log prefix "Error: ipv6 in tunnel! " flags all counter
}
chain INPUT {
type filter hook input priority filter;
iifname ip6tnl1 meta nfproto ipv6 log prefix "Error: ipv6 in tunnel! " flags all counter
}
chain POSTROUTING {
type filter hook postrouting priority filter;
iifname ip6tnl1 tcp flags & syn == syn tcp option maxseg size set rt mtu counter # log prefix "TCPMSS shortened (input) " level debug flags all
oifname ip6tnl1 tcp flags & syn == syn tcp option maxseg size set rt mtu counter # log prefix "TCPMSS shortened (output) " level debug flags all
}
}
table ip map_e_nat {
map myvmap {
type mark : verdict
elements = { 1 : goto map_e_chain1, 2 : goto map_e_chain2, 3 : goto map_e_chain3, 4 : goto map_e_chain4, 5 : goto map_e_chain5, 6 : goto map_e_chain6, 7 : goto map_e_chain7, 8 : goto map_e_chain8, 9 : goto map_e_chain9, 10 : goto map_e_chain10, 11 : goto map_e_chain11, 12 : goto map_e_chain12, 13 : goto map_e_chain13, 14 : goto map_e_chain14, 15 : goto map_e_chain15, 16 : goto map_e_chain16, 17 : goto map_e_chain17, 18 : goto map_e_chain18, 19 : goto map_e_chain19, 20 : goto map_e_chain20, 21 : goto map_e_chain21, 22 : goto map_e_chain22, 23 : goto map_e_chain23, 24 : goto map_e_chain24, 25 : goto map_e_chain25, 26 : goto map_e_chain26, 27 : goto map_e_chain27, 28 : goto map_e_chain28, 29 : goto map_e_chain29, 30 : goto map_e_chain30, 31 : goto map_e_chain31, 32 : goto map_e_chain32, 33 : goto map_e_chain33, 34 : goto map_e_chain34, 35 : goto map_e_chain35, 36 : goto map_e_chain36, 37 : goto map_e_chain37, 38 : goto map_e_chain38, 39 : goto map_e_chain39, 40 : goto map_e_chain40, 41 : goto map_e_chain41, 42 : goto map_e_chain42, 43 : goto map_e_chain43, 44 : goto map_e_chain44, 45 : goto map_e_chain45, 46 : goto map_e_chain46, 47 : goto map_e_chain47, 48 : goto map_e_chain48, 49 : goto map_e_chain49, 50 : goto map_e_chain50, 51 : goto map_e_chain51, 52 : goto map_e_chain52, 53 : goto map_e_chain53, 54 : goto map_e_chain54, 55 : goto map_e_chain55, 56 : goto map_e_chain56, 57 : goto map_e_chain57, 58 : goto map_e_chain58, 59 : goto map_e_chain59, 60 : goto map_e_chain60, 61 : goto map_e_chain61, 62 : goto map_e_chain62, 63 : goto map_e_chain63, 64 : goto map_e_chain64 }
}
chain POSTROUTING {
type nat hook postrouting priority srcnat;
oifname ip6tnl1 mark set 1 counter packets 0
oifname ip6tnl1 meta l4proto tcp mark set numgen inc mod 61 offset 2 counter packets 0 # Chain64 or 63 will not be used and reserved for server use.
oifname ip6tnl1 meta l4proto udp mark set numgen inc mod 61 offset 2 counter packets 0 # Chain64 or 63 will not be used and reserved for server use.
oifname ip6tnl1 meta l4proto icmp mark set numgen inc mod 61 offset 2 counter packets 0 # Chain64 or 63 will not be used and reserved for server use.
oifname ip6tnl1 meta l4proto udplite mark set numgen inc mod 61 offset 2 counter packets 0 # Chain64 or 63 will not be used and reserved for server use.
oifname ip6tnl1 meta l4proto sctp mark set numgen inc mod 61 offset 2 counter packets 0 # Chain64 or 63 will not be used and reserved for server use.
oifname ip6tnl1 meta l4proto dccp mark set numgen inc mod 61 offset 2 counter packets 0 # Chain64 or 63 will not be used and reserved for server use.
oifname ip6tnl1 meta mark vmap @myvmap
}
chain map_e_chain1 { log prefix "Unknown protocol to ip6tnl " level info flags all counter; }
chain map_e_chain2 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:1728-1743 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:1728-1743 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:1728-1743 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:1728-1743 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:1728-1743 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:1728-1743 persistent; }
chain map_e_chain3 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:2752-2767 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:2752-2767 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:2752-2767 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:2752-2767 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:2752-2767 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:2752-2767 persistent; }
chain map_e_chain4 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:3776-3791 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:3776-3791 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:3776-3791 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:3776-3791 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:3776-3791 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:3776-3791 persistent; }
chain map_e_chain5 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:4800-4815 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:4800-4815 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:4800-4815 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:4800-4815 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:4800-4815 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:4800-4815 persistent; }
chain map_e_chain6 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:5824-5839 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:5824-5839 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:5824-5839 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:5824-5839 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:5824-5839 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:5824-5839 persistent; }
chain map_e_chain7 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:6848-6863 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:6848-6863 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:6848-6863 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:6848-6863 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:6848-6863 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:6848-6863 persistent; }
chain map_e_chain8 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:7872-7887 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:7872-7887 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:7872-7887 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:7872-7887 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:7872-7887 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:7872-7887 persistent; }
chain map_e_chain9 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:8896-8911 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:8896-8911 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:8896-8911 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:8896-8911 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:8896-8911 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:8896-8911 persistent; }
chain map_e_chain10 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:9920-9935 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:9920-9935 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:9920-9935 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:9920-9935 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:9920-9935 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:9920-9935 persistent; }
chain map_e_chain11 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:10944-10959 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:10944-10959 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:10944-10959 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:10944-10959 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:10944-10959 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:10944-10959 persistent; }
chain map_e_chain12 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:11968-11983 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:11968-11983 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:11968-11983 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:11968-11983 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:11968-11983 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:11968-11983 persistent; }
chain map_e_chain13 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:12992-13007 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:12992-13007 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:12992-13007 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:12992-13007 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:12992-13007 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:12992-13007 persistent; }
chain map_e_chain14 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:14016-14031 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:14016-14031 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:14016-14031 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:14016-14031 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:14016-14031 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:14016-14031 persistent; }
chain map_e_chain15 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:15040-15055 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:15040-15055 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:15040-15055 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:15040-15055 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:15040-15055 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:15040-15055 persistent; }
chain map_e_chain16 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:16064-16079 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:16064-16079 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:16064-16079 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:16064-16079 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:16064-16079 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:16064-16079 persistent; }
chain map_e_chain17 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:17088-17103 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:17088-17103 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:17088-17103 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:17088-17103 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:17088-17103 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:17088-17103 persistent; }
chain map_e_chain18 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:18112-18127 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:18112-18127 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:18112-18127 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:18112-18127 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:18112-18127 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:18112-18127 persistent; }
chain map_e_chain19 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:19136-19151 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:19136-19151 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:19136-19151 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:19136-19151 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:19136-19151 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:19136-19151 persistent; }
chain map_e_chain20 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:20160-20175 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:20160-20175 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:20160-20175 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:20160-20175 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:20160-20175 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:20160-20175 persistent; }
chain map_e_chain21 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:21184-21199 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:21184-21199 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:21184-21199 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:21184-21199 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:21184-21199 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:21184-21199 persistent; }
chain map_e_chain22 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:22208-22223 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:22208-22223 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:22208-22223 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:22208-22223 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:22208-22223 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:22208-22223 persistent; }
chain map_e_chain23 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:23232-23247 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:23232-23247 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:23232-23247 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:23232-23247 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:23232-23247 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:23232-23247 persistent; }
chain map_e_chain24 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:24256-24271 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:24256-24271 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:24256-24271 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:24256-24271 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:24256-24271 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:24256-24271 persistent; }
chain map_e_chain25 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:25280-25295 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:25280-25295 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:25280-25295 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:25280-25295 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:25280-25295 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:25280-25295 persistent; }
chain map_e_chain26 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:26304-26319 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:26304-26319 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:26304-26319 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:26304-26319 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:26304-26319 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:26304-26319 persistent; }
chain map_e_chain27 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:27328-27343 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:27328-27343 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:27328-27343 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:27328-27343 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:27328-27343 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:27328-27343 persistent; }
chain map_e_chain28 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:28352-28367 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:28352-28367 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:28352-28367 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:28352-28367 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:28352-28367 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:28352-28367 persistent; }
chain map_e_chain29 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:29376-29391 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:29376-29391 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:29376-29391 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:29376-29391 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:29376-29391 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:29376-29391 persistent; }
chain map_e_chain30 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:30400-30415 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:30400-30415 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:30400-30415 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:30400-30415 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:30400-30415 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:30400-30415 persistent; }
chain map_e_chain31 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:31424-31439 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:31424-31439 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:31424-31439 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:31424-31439 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:31424-31439 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:31424-31439 persistent; }
chain map_e_chain32 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:32448-32463 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:32448-32463 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:32448-32463 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:32448-32463 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:32448-32463 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:32448-32463 persistent; }
chain map_e_chain33 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:33472-33487 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:33472-33487 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:33472-33487 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:33472-33487 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:33472-33487 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:33472-33487 persistent; }
chain map_e_chain34 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:34496-34511 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:34496-34511 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:34496-34511 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:34496-34511 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:34496-34511 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:34496-34511 persistent; }
chain map_e_chain35 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:35520-35535 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:35520-35535 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:35520-35535 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:35520-35535 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:35520-35535 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:35520-35535 persistent; }
chain map_e_chain36 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:36544-36559 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:36544-36559 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:36544-36559 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:36544-36559 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:36544-36559 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:36544-36559 persistent; }
chain map_e_chain37 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:37568-37583 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:37568-37583 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:37568-37583 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:37568-37583 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:37568-37583 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:37568-37583 persistent; }
chain map_e_chain38 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:38592-38607 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:38592-38607 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:38592-38607 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:38592-38607 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:38592-38607 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:38592-38607 persistent; }
chain map_e_chain39 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:39616-39631 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:39616-39631 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:39616-39631 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:39616-39631 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:39616-39631 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:39616-39631 persistent; }
chain map_e_chain40 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:40640-40655 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:40640-40655 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:40640-40655 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:40640-40655 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:40640-40655 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:40640-40655 persistent; }
chain map_e_chain41 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:41664-41679 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:41664-41679 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:41664-41679 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:41664-41679 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:41664-41679 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:41664-41679 persistent; }
chain map_e_chain42 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:42688-42703 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:42688-42703 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:42688-42703 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:42688-42703 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:42688-42703 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:42688-42703 persistent; }
chain map_e_chain43 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:43712-43727 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:43712-43727 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:43712-43727 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:43712-43727 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:43712-43727 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:43712-43727 persistent; }
chain map_e_chain44 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:44736-44751 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:44736-44751 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:44736-44751 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:44736-44751 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:44736-44751 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:44736-44751 persistent; }
chain map_e_chain45 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:45760-45775 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:45760-45775 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:45760-45775 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:45760-45775 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:45760-45775 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:45760-45775 persistent; }
chain map_e_chain46 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:46784-46799 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:46784-46799 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:46784-46799 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:46784-46799 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:46784-46799 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:46784-46799 persistent; }
chain map_e_chain47 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:47808-47823 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:47808-47823 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:47808-47823 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:47808-47823 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:47808-47823 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:47808-47823 persistent; }
chain map_e_chain48 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:48832-48847 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:48832-48847 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:48832-48847 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:48832-48847 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:48832-48847 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:48832-48847 persistent; }
chain map_e_chain49 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:49856-49871 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:49856-49871 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:49856-49871 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:49856-49871 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:49856-49871 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:49856-49871 persistent; }
chain map_e_chain50 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:50880-50895 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:50880-50895 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:50880-50895 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:50880-50895 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:50880-50895 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:50880-50895 persistent; }
chain map_e_chain51 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:51904-51919 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:51904-51919 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:51904-51919 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:51904-51919 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:51904-51919 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:51904-51919 persistent; }
chain map_e_chain52 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:52928-52943 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:52928-52943 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:52928-52943 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:52928-52943 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:52928-52943 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:52928-52943 persistent; }
chain map_e_chain53 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:53952-53967 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:53952-53967 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:53952-53967 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:53952-53967 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:53952-53967 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:53952-53967 persistent; }
chain map_e_chain54 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:54976-54991 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:54976-54991 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:54976-54991 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:54976-54991 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:54976-54991 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:54976-54991 persistent; }
chain map_e_chain55 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:56000-56015 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:56000-56015 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:56000-56015 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:56000-56015 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:56000-56015 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:56000-56015 persistent; }
chain map_e_chain56 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:57024-57039 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:57024-57039 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:57024-57039 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:57024-57039 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:57024-57039 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:57024-57039 persistent; }
chain map_e_chain57 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:58048-58063 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:58048-58063 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:58048-58063 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:58048-58063 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:58048-58063 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:58048-58063 persistent; }
chain map_e_chain58 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:59072-59087 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:59072-59087 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:59072-59087 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:59072-59087 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:59072-59087 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:59072-59087 persistent; }
chain map_e_chain59 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:60096-60111 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:60096-60111 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:60096-60111 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:60096-60111 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:60096-60111 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:60096-60111 persistent; }
chain map_e_chain60 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:61120-61135 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:61120-61135 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:61120-61135 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:61120-61135 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:61120-61135 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:61120-61135 persistent; }
chain map_e_chain61 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:62144-62159 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:62144-62159 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:62144-62159 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:62144-62159 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:62144-62159 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:62144-62159 persistent; }
chain map_e_chain62 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:63168-63183 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:63168-63183 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:63168-63183 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:63168-63183 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:63168-63183 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:63168-63183 persistent; }
chain map_e_chain63 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:64192-64207 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:64192-64207 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:64192-64207 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:64192-64207 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:64192-64207 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:64192-64207 persistent; }
chain map_e_chain64 { meta l4proto tcp counter packets 0 snat to 153.240.174.134:65216-65231 persistent; meta l4proto udp counter packets 0 snat to 153.240.174.134:65216-65231 persistent; meta l4proto icmp counter packets 0 snat to 153.240.174.134:65216-65231 persistent; meta l4proto udplite counter packets 0 snat to 153.240.174.134:65216-65231 persistent; meta l4proto sctp counter packets 0 snat to 153.240.174.134:65216-65231 persistent; meta l4proto dccp counter packets 0 snat to 153.240.174.134:65216-65231 persistent; }
}
Reply to: