Skip to content

Instantly share code, notes, and snippets.

@fmuyassarov

fmuyassarov/calico_4_16.09.txt

Created September 16, 2025 08:55
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save fmuyassarov/3aa5f04fb48ec0471d7d6da40a2eac62 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save fmuyassarov/3aa5f04fb48ec0471d7d6da40a2eac62 to your computer and use it in GitHub Desktop.
Download ZIP
Pods are created
Raw
calico_4_16.09.txt
Chain INPUT (policy ACCEPT 948M packets, 307G bytes)
pkts bytes target prot opt in out source destination
125M 38G cali-INPUT all -- any any anywhere anywhere /* cali:Cz_u1IQiXIMmKD4c */
121M 37G KUBE-IPVS-FILTER all -- any any anywhere anywhere /* kubernetes ipvs access filter */
121M 37G KUBE-PROXY-FIREWALL all -- any any anywhere anywhere /* kube-proxy firewall rules */
121M 37G KUBE-NODE-PORT all -- any any anywhere anywhere /* kubernetes health check rules */
14M 829M KUBE-PROXY-FIREWALL all -- any any anywhere anywhere ctstate NEW /* kubernetes load balancer firewall */
948M 307G KUBE-NODEPORTS all -- any any anywhere anywhere /* kubernetes health check service ports */
14M 829M KUBE-EXTERNAL-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes externally-visible service portals */
948M 307G KUBE-FIREWALL all -- any any anywhere anywhere
Chain FORWARD (policy ACCEPT 2 packets, 181 bytes)
pkts bytes target prot opt in out source destination
30 3947 cali-FORWARD all -- any any anywhere anywhere /* cali:wUHhoiAYhphO9Mso */
16052 82M DOCKER-USER all -- any any anywhere anywhere
16052 82M DOCKER-FORWARD all -- any any anywhere anywhere
78 6539 KUBE-PROXY-FIREWALL all -- any any anywhere anywhere /* kube-proxy firewall rules */
817K 87M KUBE-PROXY-FIREWALL all -- any any anywhere anywhere ctstate NEW /* kubernetes load balancer firewall */
1164K 1940M KUBE-FORWARD all -- any any anywhere anywhere /* kubernetes forwarding rules */
817K 87M KUBE-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes service portals */
817K 87M KUBE-EXTERNAL-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes externally-visible service portals */
15 1329 ACCEPT all -- any any anywhere anywhere /* cali:S93hcgKJrXEqnTfs */ /* Policy explicitly accepted packet. */ mark match 0x10000/0x10000
0 0 MARK all -- any any anywhere anywhere /* cali:mp77cMpurHhyjLrM */ MARK or 0x10000
Chain OUTPUT (policy ACCEPT 1007M packets, 330G bytes)
pkts bytes target prot opt in out source destination
125M 37G cali-OUTPUT all -- any any anywhere anywhere /* cali:tVnHkvAo15HuiPy0 */
125M 37G KUBE-IPVS-OUT-FILTER all -- any any anywhere anywhere /* kubernetes ipvs access filter */
17M 1011M KUBE-PROXY-FIREWALL all -- any any anywhere anywhere ctstate NEW /* kubernetes load balancer firewall */
17M 1011M KUBE-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes service portals */
1007M 330G KUBE-FIREWALL all -- any any anywhere anywhere
Chain DOCKER (2 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- !br-bc18ce9c999c br-bc18ce9c999c anywhere anywhere
0 0 DROP all -- !docker0 docker0 anywhere anywhere
Chain DOCKER-BRIDGE (1 references)
pkts bytes target prot opt in out source destination
0 0 DOCKER all -- any br-bc18ce9c999c anywhere anywhere
0 0 DOCKER all -- any docker0 anywhere anywhere
Chain DOCKER-CT (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any br-bc18ce9c999c anywhere anywhere ctstate RELATED,ESTABLISHED
10330 81M ACCEPT all -- any docker0 anywhere anywhere ctstate RELATED,ESTABLISHED
Chain DOCKER-FORWARD (1 references)
pkts bytes target prot opt in out source destination
16052 82M DOCKER-CT all -- any any anywhere anywhere
5722 517K DOCKER-ISOLATION-STAGE-1 all -- any any anywhere anywhere
5722 517K DOCKER-BRIDGE all -- any any anywhere anywhere
0 0 ACCEPT all -- br-bc18ce9c999c any anywhere anywhere
5707 516K ACCEPT all -- docker0 any anywhere anywhere
Chain DOCKER-ISOLATION-STAGE-1 (1 references)
pkts bytes target prot opt in out source destination
0 0 DOCKER-ISOLATION-STAGE-2 all -- br-bc18ce9c999c !br-bc18ce9c999c anywhere anywhere
5707 516K DOCKER-ISOLATION-STAGE-2 all -- docker0 !docker0 anywhere anywhere
Chain DOCKER-ISOLATION-STAGE-2 (2 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- any docker0 anywhere anywhere
0 0 DROP all -- any br-bc18ce9c999c anywhere anywhere
Chain DOCKER-USER (1 references)
pkts bytes target prot opt in out source destination
833K 169M RETURN all -- any any anywhere anywhere
Chain KUBE-EXTERNAL-SERVICES (2 references)
pkts bytes target prot opt in out source destination
Chain KUBE-FIREWALL (2 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- any any !localhost/8 localhost/8 /* block incoming localnet connections */ ! ctstate RELATED,ESTABLISHED,DNAT
Chain KUBE-FORWARD (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* kubernetes forwarding rules */ mark match 0x4000/0x4000
0 0 ACCEPT all -- any any anywhere anywhere /* kubernetes forwarding conntrack rule */ ctstate RELATED,ESTABLISHED
Chain KUBE-IPVS-FILTER (1 references)
pkts bytes target prot opt in out source destination
0 0 RETURN all -- any any anywhere anywhere match-set KUBE-LOAD-BALANCER dst,dst
0 0 RETURN all -- any any anywhere anywhere match-set KUBE-CLUSTER-IP dst,dst
0 0 RETURN all -- any any anywhere anywhere match-set KUBE-EXTERNAL-IP dst,dst
0 0 RETURN all -- any any anywhere anywhere match-set KUBE-EXTERNAL-IP-LOCAL dst,dst
0 0 RETURN all -- any any anywhere anywhere match-set KUBE-HEALTH-CHECK-NODE-PORT dst
0 0 REJECT all -- any any anywhere anywhere ctstate NEW match-set KUBE-IPVS-IPS dst reject-with icmp-port-unreachable
Chain KUBE-IPVS-OUT-FILTER (1 references)
pkts bytes target prot opt in out source destination
Chain KUBE-KUBELET-CANARY (0 references)
pkts bytes target prot opt in out source destination
Chain KUBE-NODE-PORT (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* Kubernetes health check node port */ match-set KUBE-HEALTH-CHECK-NODE-PORT dst
Chain KUBE-NODEPORTS (1 references)
pkts bytes target prot opt in out source destination
Chain KUBE-PROXY-CANARY (0 references)
pkts bytes target prot opt in out source destination
Chain KUBE-PROXY-FIREWALL (5 references)
pkts bytes target prot opt in out source destination
Chain KUBE-SERVICES (2 references)
pkts bytes target prot opt in out source destination
Chain KUBE-SOURCE-RANGES-FIREWALL (0 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- any any anywhere anywhere
Chain cali-FORWARD (1 references)
pkts bytes target prot opt in out source destination
18M 13G MARK all -- any any anywhere anywhere /* cali:W_vvds1Nw3n9QE2f */ MARK and 0xffe5ffff
18M 13G cali-from-hep-forward all -- any any anywhere anywhere /* cali:ZfgmjuiLaA8Pg0kp */ mark match 0x0/0x10000
18M 10G cali-from-wl-dispatch all -- cali+ any anywhere anywhere /* cali:tAzwBLPaV-j53OOZ */
971K 506M cali-to-wl-dispatch all -- any cali+ anywhere anywhere /* cali:4Z0Pf0byo05NFe-P */
1164K 1940M cali-to-hep-forward all -- any any anywhere anywhere /* cali:hQ7Oc16wmUtLuneJ */
1164K 1940M cali-cidr-block all -- any any anywhere anywhere /* cali:rnKNH2WxGcRQcIlD */
Chain cali-INPUT (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- any any anywhere anywhere /* cali:J76FwxInZIsk7uKY */ /* Allow IPv4 VXLAN packets from allowed hosts */ multiport dports 4789 match-set cali40all-vxlan-net src ADDRTYPE match dst-type LOCAL
0 0 DROP udp -- any any anywhere anywhere /* cali:EDCNTTxYfggApx8C */ /* Drop IPv4 VXLAN packets from non-allowed hosts */ multiport dports 4789 ADDRTYPE match dst-type LOCAL
125M 38G MARK all -- any any anywhere anywhere /* cali:Hz1t719gvzQYArBa */ MARK and 0x1fffff
125M 38G cali-forward-check all -- any any anywhere anywhere /* cali:rt1ceUt-QunCljVo */
13840 1572K RETURN all -- any any anywhere anywhere /* cali:5TfExhsEygaw5WNP */ mark match ! 0x0/0xffe00000
3805K 901M cali-wl-to-host all -- cali+ any anywhere anywhere [goto] /* cali:j6OiaG2jjZFeTZte */
0 0 ACCEPT all -- any any anywhere anywhere /* cali:WU4wJ9petBl26un4 */ mark match 0x10000/0x10000
121M 37G MARK all -- any any anywhere anywhere /* cali:_mSLQGQIis29dwhH */ MARK and 0xffe4ffff
121M 37G cali-from-host-endpoint all -- any any anywhere anywhere /* cali:pt2p0_J8ELXMHiay */
0 0 ACCEPT all -- any any anywhere anywhere /* cali:-4XE-lAiaxcnxl-8 */ /* Host endpoint policy accepted packet. */ mark match 0x10000/0x10000
Chain cali-OUTPUT (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Mq1_rAdXXH3YkrzW */ mark match 0x10000/0x10000
0 0 cali-forward-endpoint-mark all -- any any anywhere anywhere [goto] /* cali:WNHnGdgrUWvfYkdH */ mark match ! 0x0/0xffe00000
3828K 1008M RETURN all -- any cali+ anywhere anywhere /* cali:Up2wGMO6nRDp24b- */
0 0 ACCEPT udp -- any any anywhere anywhere /* cali:QsE5fnM-jCO2_R_T */ /* Allow IPv4 VXLAN packets to other allowed hosts */ multiport dports 4789 ADDRTYPE match src-type LOCAL match-set cali40all-vxlan-net dst
121M 36G MARK all -- any any anywhere anywhere /* cali:y338Pv7g73V_m9Wq */ MARK and 0xffe4ffff
121M 36G cali-to-host-endpoint all -- any any anywhere anywhere /* cali:6tWiGowqka9jSA7w */ ! ctstate DNAT
0 0 ACCEPT all -- any any anywhere anywhere /* cali:2rC7tEofqr0eOMMq */ /* Host endpoint policy accepted packet. */ mark match 0x10000/0x10000
Chain cali-cidr-block (1 references)
pkts bytes target prot opt in out source destination
Chain cali-failsafe-in (3 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:wWFQM43tJU7wwnFZ */ multiport dports ssh
0 0 ACCEPT udp -- any any anywhere anywhere /* cali:LwNV--R8MjeUYacw */ multiport dports bootpc
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:QOO5NUOqOSS1_Iw0 */ multiport dports bgp
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:cwZWoBSwVeIAZmVN */ multiport dports 2379
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:7FbNXT91kugE_upR */ multiport dports 2380
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:8Ftbkk2dRH2eEeq1 */ multiport dports 5473
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:-JoRSaAQZPJAegMo */ multiport dports 6443
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:PUKij4Rn9njHfVTi */ multiport dports 6666
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:vSprVE-4rient0wc */ multiport dports ircd
Chain cali-failsafe-out (3 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- any any anywhere anywhere /* cali:82hjfji-wChFhAqL */ multiport dports domain
0 0 ACCEPT udp -- any any anywhere anywhere /* cali:TNM3RfEjbNr72hgH */ multiport dports bootps
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:ycxKitIl4u3dK0HR */ multiport dports bgp
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:hxjEWyxdkXXkdvut */ multiport dports 2379
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:cA_GLtruuvG88KiO */ multiport dports 2380
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:ALz4foMyfue7vaqK */ multiport dports 5473
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:zvCXe1uOiQ8adzhn */ multiport dports 6443
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:Lppo9JuKR7AyZoWQ */ multiport dports 6666
0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:EoOkKdH0fekirfk8 */ multiport dports ircd
Chain cali-fh-adummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:KfSIATvjGaK4zGj1 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:9P1i-1Uq2VzBO2PV */ ctstate INVALID
0 0 cali-failsafe-in all -- any any anywhere anywhere /* cali:9fTcLBxw7RpWzYcn */
0 0 MARK all -- any any anywhere anywhere /* cali:FBSa7pCs1mUiQqM8 */ MARK and 0xfffcffff
0 0 NFLOG all -- any any anywhere anywhere /* cali:bgWdKuewqYTMVuAZ */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:b4LLU1bG7O6XM_d- */ /* Drop if no profiles matched */
Chain cali-fh-adummy1 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:v4M9QFls4ZPiyZy7 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:3AmWDyZULYQY9GjN */ ctstate INVALID
0 0 cali-failsafe-in all -- any any anywhere anywhere /* cali:2dVDormZdB8Q6KsH */
0 0 MARK all -- any any anywhere anywhere /* cali:4rttKZJ47f19c54X */ MARK and 0xfffcffff
0 0 NFLOG all -- any any anywhere anywhere /* cali:yVvuTmJ059apWZcX */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:jal6F2y8NERZT70w */ /* Drop if no profiles matched */
Chain cali-fh-cdummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:wQNdFSotavCSO0VD */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:ogjBiTOJ3F4yQM1k */ ctstate INVALID
0 0 cali-failsafe-in all -- any any anywhere anywhere /* cali:8ojDI8KR9JE8GIyT */
0 0 MARK all -- any any anywhere anywhere /* cali:WUrm0g_vABO1YJkM */ MARK and 0xfffcffff
0 0 NFLOG all -- any any anywhere anywhere /* cali:TAxiLDR0uBRlFoIp */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:cN-YDUuxceI2LTC- */ /* Drop if no profiles matched */
Chain cali-fhfw-adummy0 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:p6N3xKLkWCAfIBz7 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:SO8c1B0UTbPSuOJi */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ecJjlnMA_3gt3VhD */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:u_FsQ3kZMBA2R1aA */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:ZQ7qVaUNIUtO9rA9 */ /* Return for accepted forward traffic */
Chain cali-fhfw-adummy1 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:iyFDpZ3GCaODXV8_ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:R7ttpJi85eXZRhhh */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:mFNHOTYjHonv6NUc */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:v1NCCt3EkuqkogCs */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:-_4UngRn6sG-pB7C */ /* Return for accepted forward traffic */
Chain cali-fhfw-cdummy0 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:8iH-8Pj5FbqTCEEY */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:witZtAzEZxdUFJMA */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Z-NR55r2UW9m72x9 */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:zPyQulz6xiDgtoZp */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:m6E3DrPjujVLLpOR */ /* Return for accepted forward traffic */
Chain cali-forward-check (1 references)
pkts bytes target prot opt in out source destination
123M 38G RETURN all -- any any anywhere anywhere /* cali:Pbldlb4FaULvpdD8 */ ctstate RELATED,ESTABLISHED
0 0 cali-set-endpoint-mark tcp -- any any anywhere anywhere [goto] /* cali:ZD-6UxuUtGW-xtzg */ /* To kubernetes NodePort service */ multiport dports 30000:32767 match-set cali40this-host dst
0 0 cali-set-endpoint-mark udp -- any any anywhere anywhere [goto] /* cali:CbPfUajQ2bFVnDq4 */ /* To kubernetes NodePort service */ multiport dports 30000:32767 match-set cali40this-host dst
13865 1574K cali-set-endpoint-mark all -- any any anywhere anywhere /* cali:jmhU0ODogX-Zfe5g */ /* To kubernetes service */ ! match-set cali40this-host dst
Chain cali-forward-endpoint-mark (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-from-endpoint-mark all -- any any anywhere anywhere /* cali:VYFqh16JYiw3cgNB */ mark match ! 0x200000/0xffe00000
0 0 cali-to-wl-dispatch all -- any cali+ anywhere anywhere /* cali:2lKRDazGTrGrCwLx */
0 0 cali-to-hep-forward all -- any any anywhere anywhere /* cali:loGDq4znkQ2ypegW */
0 0 MARK all -- any any anywhere anywhere /* cali:KVrWUDPOw87B6a-K */ MARK and 0x1fffff
0 0 ACCEPT all -- any any anywhere anywhere /* cali:G-_uEKDzkg-3A3cw */ /* Policy explicitly accepted packet. */ mark match 0x10000/0x10000
Chain cali-from-endpoint-mark (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali01ca0d88e23 all -- any any anywhere anywhere [goto] /* cali:XX6DTEqiW7y_O2hx */ mark match 0x8ee00000/0xffe00000
0 0 cali-fw-cali01e885824be all -- any any anywhere anywhere [goto] /* cali:1EpxBN6zeMlpnwkK */ mark match 0x93800000/0xffe00000
0 0 cali-fw-cali049f31cdaa2 all -- any any anywhere anywhere [goto] /* cali:09qwnemzvDSmYyqE */ mark match 0x4f000000/0xffe00000
0 0 cali-fw-cali0576c91a912 all -- any any anywhere anywhere [goto] /* cali:dlel7gtbsfqfMXCs */ mark match 0xa7000000/0xffe00000
0 0 cali-fw-cali06114a20c1e all -- any any anywhere anywhere [goto] /* cali:8tzHgBUTTISILPyx */ mark match 0x4d800000/0xffe00000
0 0 cali-fw-cali06aac5ed2e0 all -- any any anywhere anywhere [goto] /* cali:_NagFbE3rIXf_CQW */ mark match 0xb000000/0xffe00000
0 0 cali-fw-cali11a5a48ff09 all -- any any anywhere anywhere [goto] /* cali:IuyDby6VtttdH3Kg */ mark match 0x54800000/0xffe00000
0 0 cali-fw-cali12e0df46963 all -- any any anywhere anywhere [goto] /* cali:zAtujBIU9JDlxc5M */ mark match 0x69400000/0xffe00000
0 0 cali-fw-cali13f46d88cc9 all -- any any anywhere anywhere [goto] /* cali:VaH0LOEzOczK7vZJ */ mark match 0x6de00000/0xffe00000
0 0 cali-fw-cali145de1560bc all -- any any anywhere anywhere [goto] /* cali:KtqoYmbCyhOk20TD */ mark match 0x46800000/0xffe00000
0 0 cali-fw-cali16870f08964 all -- any any anywhere anywhere [goto] /* cali:s3kQ8Pc-CVRkCHH0 */ mark match 0xfce00000/0xffe00000
0 0 cali-fw-cali193f7d98be3 all -- any any anywhere anywhere [goto] /* cali:4JjiySOoaBdvauQA */ mark match 0xace00000/0xffe00000
0 0 cali-fw-cali1a3c10d6230 all -- any any anywhere anywhere [goto] /* cali:8Ix4NwK1GhNpdXD3 */ mark match 0x8e800000/0xffe00000
0 0 cali-fw-cali1a421c33dfc all -- any any anywhere anywhere [goto] /* cali:7tz0UX9e2a2cAtSi */ mark match 0xf0e00000/0xffe00000
0 0 cali-fw-cali22e016245eb all -- any any anywhere anywhere [goto] /* cali:MueCqUHHllbcBqAz */ mark match 0x33000000/0xffe00000
0 0 cali-fw-cali2ea845f9301 all -- any any anywhere anywhere [goto] /* cali:se23HC3V15YNXQDf */ mark match 0xee000000/0xffe00000
0 0 cali-fw-cali34bca5edd1b all -- any any anywhere anywhere [goto] /* cali:C-SVEKJG5o-kp7YZ */ mark match 0xa400000/0xffe00000
0 0 cali-fw-cali3dd65087074 all -- any any anywhere anywhere [goto] /* cali:TE1GqKZCLnuLQihx */ mark match 0x2d800000/0xffe00000
0 0 cali-fw-cali4272878fdab all -- any any anywhere anywhere [goto] /* cali:q528m05zJ8dNU7TP */ mark match 0xe2200000/0xffe00000
0 0 cali-fw-cali467b6a1f983 all -- any any anywhere anywhere [goto] /* cali:htxpKxW9UjabjJNh */ mark match 0xd9e00000/0xffe00000
0 0 cali-fw-cali502fc901a2f all -- any any anywhere anywhere [goto] /* cali:uHR24vtgJB90DyCY */ mark match 0xcee00000/0xffe00000
0 0 cali-fw-cali5374357b2dd all -- any any anywhere anywhere [goto] /* cali:9xJO5f8N9ikrxfNX */ mark match 0xe7000000/0xffe00000
0 0 cali-fw-cali57581718244 all -- any any anywhere anywhere [goto] /* cali:h90a-qvP45qZBH8X */ mark match 0xe0400000/0xffe00000
0 0 cali-fw-cali5ed4c1e9a39 all -- any any anywhere anywhere [goto] /* cali:-rYB3RWKjxlvRiZp */ mark match 0xf9a00000/0xffe00000
0 0 cali-fw-cali609774fb6ac all -- any any anywhere anywhere [goto] /* cali:N6xyw9FoqjxUXn0n */ mark match 0x36e00000/0xffe00000
0 0 cali-fw-cali6099c4a8778 all -- any any anywhere anywhere [goto] /* cali:vfSX3d99QESjaqJ9 */ mark match 0x1a000000/0xffe00000
0 0 cali-fw-cali669be974601 all -- any any anywhere anywhere [goto] /* cali:jzseTM8ogOUFFErM */ mark match 0x65200000/0xffe00000
0 0 cali-fw-cali6c3741a667a all -- any any anywhere anywhere [goto] /* cali:EiAQ0uSQfkrUulVB */ mark match 0x9be00000/0xffe00000
0 0 cali-fw-cali6d815386f40 all -- any any anywhere anywhere [goto] /* cali:KEmzcZYUj-AxLqxu */ mark match 0x48a00000/0xffe00000
0 0 cali-fw-cali6e9e9baed01 all -- any any anywhere anywhere [goto] /* cali:DIyicEAKB0kklK1p */ mark match 0x51600000/0xffe00000
0 0 cali-fw-cali701e7cc6c80 all -- any any anywhere anywhere [goto] /* cali:Vok2xp_VdYvlgDE2 */ mark match 0x7a00000/0xffe00000
0 0 cali-fw-cali736792029c9 all -- any any anywhere anywhere [goto] /* cali:UaRuCdHErrOKSM3c */ mark match 0xa3200000/0xffe00000
0 0 cali-fw-cali741adbc0280 all -- any any anywhere anywhere [goto] /* cali:hpnAdQNY2d61RYAe */ mark match 0xbf400000/0xffe00000
0 0 cali-fw-cali7b7a4c8576a all -- any any anywhere anywhere [goto] /* cali:ohHDr9k5o9HDM9au */ mark match 0x24600000/0xffe00000
0 0 cali-fw-cali81ba87c5c60 all -- any any anywhere anywhere [goto] /* cali:Y3Ofb7Zg4q0kkRu2 */ mark match 0xd4400000/0xffe00000
0 0 cali-fw-cali82b79fb83c5 all -- any any anywhere anywhere [goto] /* cali:C7Eel5nhtSYJaRFf */ mark match 0x8c600000/0xffe00000
0 0 cali-fw-cali83c474a3c81 all -- any any anywhere anywhere [goto] /* cali:fXaXyJTC4qoq9blG */ mark match 0xcae00000/0xffe00000
0 0 cali-fw-cali8706671fffc all -- any any anywhere anywhere [goto] /* cali:pVgGaQZCyGrz9ruX */ mark match 0x13800000/0xffe00000
0 0 cali-fw-cali8d4a964a1b2 all -- any any anywhere anywhere [goto] /* cali:9OQ1JmO_qsjDpsBr */ mark match 0x9d400000/0xffe00000
0 0 cali-fw-cali91725ef2e87 all -- any any anywhere anywhere [goto] /* cali:tqG8fmlZmlu5re0F */ mark match 0x5e600000/0xffe00000
0 0 cali-fw-cali9633dc47c02 all -- any any anywhere anywhere [goto] /* cali:jt62xTwi6Q_sAM__ */ mark match 0x55000000/0xffe00000
0 0 cali-fw-cali9986e181eac all -- any any anywhere anywhere [goto] /* cali:ddoUcrn1S65EGd5Q */ mark match 0x26800000/0xffe00000
0 0 cali-fw-cali99c2052d800 all -- any any anywhere anywhere [goto] /* cali:HD_6nY2yQ7x0gO-6 */ mark match 0x17c00000/0xffe00000
0 0 cali-fw-cali9c22f997550 all -- any any anywhere anywhere [goto] /* cali:05Ao-uMYS0gdw9C4 */ mark match 0x91600000/0xffe00000
0 0 cali-fw-cali9c9451f75ea all -- any any anywhere anywhere [goto] /* cali:ipAZUCKS6Dj_Qodb */ mark match 0x6ce00000/0xffe00000
0 0 cali-fw-caliac90068d900 all -- any any anywhere anywhere [goto] /* cali:fHLXM9h7l8R0X9pS */ mark match 0xbb400000/0xffe00000
0 0 cali-fw-calib19e4206d8c all -- any any anywhere anywhere [goto] /* cali:96vkAZ_JdwOigK50 */ mark match 0xd1800000/0xffe00000
0 0 cali-fw-calib4366e6156c all -- any any anywhere anywhere [goto] /* cali:wFoOiErnwh2mDRLU */ mark match 0xcfe00000/0xffe00000
0 0 cali-fw-calibbfcc132cfe all -- any any anywhere anywhere [goto] /* cali:-IajxMphyizsDDxz */ mark match 0x78400000/0xffe00000
0 0 cali-fw-calic2b72c3abdd all -- any any anywhere anywhere [goto] /* cali:f2GNH4Z0OL9364te */ mark match 0xdae00000/0xffe00000
0 0 cali-fw-calid1d7cde9caf all -- any any anywhere anywhere [goto] /* cali:11D4NCrYAhECX93_ */ mark match 0x20a00000/0xffe00000
0 0 cali-fw-calid41ffc7ab4f all -- any any anywhere anywhere [goto] /* cali:oZi00gC3deyHM0Fn */ mark match 0xc5800000/0xffe00000
0 0 cali-fw-calie02f19b12c9 all -- any any anywhere anywhere [goto] /* cali:d3PVdUf4hc4mOHvA */ mark match 0x8f800000/0xffe00000
0 0 cali-fw-calie0317e52f89 all -- any any anywhere anywhere [goto] /* cali:Ingd0BWmXHyI4bR0 */ mark match 0x4c200000/0xffe00000
0 0 cali-fw-calie1470bf4a1a all -- any any anywhere anywhere [goto] /* cali:wtPIGvDUjSMnWr7f */ mark match 0xf000000/0xffe00000
0 0 cali-fw-calie33122e4c45 all -- any any anywhere anywhere [goto] /* cali:81vwrB5S_l4loM0F */ mark match 0xe3600000/0xffe00000
0 0 cali-fw-calie6cedf7bf9e all -- any any anywhere anywhere [goto] /* cali:NtHHvUfO9eAnE3l_ */ mark match 0x13000000/0xffe00000
0 0 cali-fw-calif9c0036887f all -- any any anywhere anywhere [goto] /* cali:xzQFSe2QESkZH6Ou */ mark match 0xcf400000/0xffe00000
0 0 cali-fw-califa6bc0a3251 all -- any any anywhere anywhere [goto] /* cali:shM48JlJtNtrLahL */ mark match 0xb6c00000/0xffe00000
0 0 cali-fhfw-adummy0 all -- any any anywhere anywhere [goto] /* cali:qnTnFzTBtTg4b9b7 */ mark match 0xb9400000/0xffe00000
0 0 cali-fhfw-adummy1 all -- any any anywhere anywhere [goto] /* cali:OSF7HHskXnukwXHB */ mark match 0xb9600000/0xffe00000
0 0 cali-fhfw-cdummy0 all -- any any anywhere anywhere [goto] /* cali:XCSwHQqpGdIBxYRp */ mark match 0xb3000000/0xffe00000
0 0 DROP all -- any any anywhere anywhere /* cali:dCLt076SP0gs6zw5 */ /* Unknown interface */
Chain cali-from-hep-forward (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-from-hep-forward-a all -- a+ any anywhere anywhere [goto] /* cali:Ikz-pJcHuTDXZIR7 */
0 0 cali-fhfw-cdummy0 all -- cdummy0 any anywhere anywhere [goto] /* cali:sXyCCCyNmRDYhzPV */
Chain cali-from-hep-forward-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fhfw-adummy0 all -- adummy0 any anywhere anywhere [goto] /* cali:nJiCqwGkrZha99P7 */
0 0 cali-fhfw-adummy1 all -- adummy1 any anywhere anywhere [goto] /* cali:sznlNsCjbCsbw-fA */
Chain cali-from-host-endpoint (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-from-host-endpoint-a all -- a+ any anywhere anywhere [goto] /* cali:be6cZBwzbM-h2tOu */
0 0 cali-fh-cdummy0 all -- cdummy0 any anywhere anywhere [goto] /* cali:OqK0BcAUeKBJxH1t */
Chain cali-from-host-endpoint-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fh-adummy0 all -- adummy0 any anywhere anywhere [goto] /* cali:ab36Uo9wuSe8vRcD */
0 0 cali-fh-adummy1 all -- adummy1 any anywhere anywhere [goto] /* cali:sX7ZaMdHppIMcBCd */
Chain cali-from-wl-dispatch (2 references)
pkts bytes target prot opt in out source destination
0 0 cali-from-wl-dispatch-0 all -- cali0+ any anywhere anywhere [goto] /* cali:eBnVcASLTvMFg9XV */
0 0 cali-from-wl-dispatch-1 all -- cali1+ any anywhere anywhere [goto] /* cali:MldUGW-Du40orI9- */
0 0 cali-from-wl-dispatch-2 all -- cali2+ any anywhere anywhere [goto] /* cali:kTdzpLxGrgPwdaCE */
0 0 cali-from-wl-dispatch-3 all -- cali3+ any anywhere anywhere [goto] /* cali:1wpgSoNgFrnUW5L_ */
31 3166 cali-from-wl-dispatch-4 all -- cali4+ any anywhere anywhere [goto] /* cali:C1kcCkbpZ9C-x7UN */
0 0 cali-from-wl-dispatch-5 all -- cali5+ any anywhere anywhere [goto] /* cali:-JggFlgCopDNNphU */
4 278 cali-from-wl-dispatch-6 all -- cali6+ any anywhere anywhere [goto] /* cali:P9qlG87slzIDom7X */
0 0 cali-from-wl-dispatch-7 all -- cali7+ any anywhere anywhere [goto] /* cali:ogUQK5OJhtKfE8td */
0 0 cali-from-wl-dispatch-8 all -- cali8+ any anywhere anywhere [goto] /* cali:vnSEs9iuDWFnCqIq */
0 0 cali-from-wl-dispatch-9 all -- cali9+ any anywhere anywhere [goto] /* cali:RCMki-GOYM2KRQew */
0 0 cali-fw-caliac90068d900 all -- caliac90068d900 any anywhere anywhere [goto] /* cali:H2m5INuDR7SehbrJ */
0 0 cali-from-wl-dispatch-b all -- calib+ any anywhere anywhere [goto] /* cali:ptWN_OWW4b0irucM */
0 0 cali-fw-calic2b72c3abdd all -- calic2b72c3abdd any anywhere anywhere [goto] /* cali:fQZMSwjB9ze1cHlu */
0 0 cali-from-wl-dispatch-d all -- calid+ any anywhere anywhere [goto] /* cali:5FFty8kKP5vZ4kDm */
0 0 cali-from-wl-dispatch-e all -- calie+ any anywhere anywhere [goto] /* cali:SuZCbhqyOF5Z-ccJ */
0 0 cali-from-wl-dispatch-f all -- calif+ any anywhere anywhere [goto] /* cali:eSmUlvDRgzPTQGqT */
0 0 DROP all -- any any anywhere anywhere /* cali:G3yk6AcoHFvP-arz */ /* Unknown interface */
Chain cali-from-wl-dispatch-0 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali01ca0d88e23 all -- cali01ca0d88e23 any anywhere anywhere [goto] /* cali:cyx_vh9WSaE0rV7U */
0 0 cali-fw-cali01e885824be all -- cali01e885824be any anywhere anywhere [goto] /* cali:WnKx6MVuCTipVZlY */
0 0 cali-fw-cali049f31cdaa2 all -- cali049f31cdaa2 any anywhere anywhere [goto] /* cali:OsC0OFH8VhBcvRKN */
0 0 cali-fw-cali0576c91a912 all -- cali0576c91a912 any anywhere anywhere [goto] /* cali:i3c1uFpKISuxpt9U */
0 0 cali-fw-cali06114a20c1e all -- cali06114a20c1e any anywhere anywhere [goto] /* cali:9Rlph6T3cblueqlS */
0 0 cali-fw-cali06aac5ed2e0 all -- cali06aac5ed2e0 any anywhere anywhere [goto] /* cali:ZjGZUIqASL_mmvLK */
0 0 DROP all -- any any anywhere anywhere /* cali:sOyifu_Pg8Mj3QiP */ /* Unknown interface */
Chain cali-from-wl-dispatch-1 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali11a5a48ff09 all -- cali11a5a48ff09 any anywhere anywhere [goto] /* cali:nvhnRLJCKZf7TLsT */
0 0 cali-fw-cali12e0df46963 all -- cali12e0df46963 any anywhere anywhere [goto] /* cali:1Ut2xycqwNIYT_xP */
0 0 cali-fw-cali13f46d88cc9 all -- cali13f46d88cc9 any anywhere anywhere [goto] /* cali:a5tsxdFQ9YnxCH6c */
0 0 cali-fw-cali145de1560bc all -- cali145de1560bc any anywhere anywhere [goto] /* cali:w1GvW6Q8wYfu_6kw */
0 0 cali-fw-cali16870f08964 all -- cali16870f08964 any anywhere anywhere [goto] /* cali:0r3-m3Dxv0eY_aLF */
0 0 cali-fw-cali193f7d98be3 all -- cali193f7d98be3 any anywhere anywhere [goto] /* cali:G3Z3a8XenmYPpiJl */
0 0 cali-fw-cali1a3c10d6230 all -- cali1a3c10d6230 any anywhere anywhere [goto] /* cali:DUFZ18CjENdEbEx9 */
0 0 cali-fw-cali1a421c33dfc all -- cali1a421c33dfc any anywhere anywhere [goto] /* cali:dlvdGw6-ewbWy3s5 */
0 0 DROP all -- any any anywhere anywhere /* cali:8w4fRHCDUJBWqUU5 */ /* Unknown interface */
Chain cali-from-wl-dispatch-2 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali22e016245eb all -- cali22e016245eb any anywhere anywhere [goto] /* cali:k64FKju4j_N3MMNF */
0 0 cali-fw-cali2ea845f9301 all -- cali2ea845f9301 any anywhere anywhere [goto] /* cali:Ysqy5eaOZuE31qC1 */
0 0 DROP all -- any any anywhere anywhere /* cali:iVpWCVabhwwmol0k */ /* Unknown interface */
Chain cali-from-wl-dispatch-3 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali34bca5edd1b all -- cali34bca5edd1b any anywhere anywhere [goto] /* cali:YA0GIVW_Q7vfKmWN */
0 0 cali-fw-cali3dd65087074 all -- cali3dd65087074 any anywhere anywhere [goto] /* cali:sasWQpUHhCGeo3PK */
0 0 DROP all -- any any anywhere anywhere /* cali:TvUMe6sa8ud62YOu */ /* Unknown interface */
Chain cali-from-wl-dispatch-4 (1 references)
pkts bytes target prot opt in out source destination
52 4651 cali-fw-cali4272878fdab all -- cali4272878fdab any anywhere anywhere [goto] /* cali:ARTQFko5yz-qyjQ8 */
0 0 cali-fw-cali467b6a1f983 all -- cali467b6a1f983 any anywhere anywhere [goto] /* cali:pNkCDoV5rlS5c-iD */
0 0 DROP all -- any any anywhere anywhere /* cali:iSHvaYDkCQeG9t4I */ /* Unknown interface */
Chain cali-from-wl-dispatch-5 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali502fc901a2f all -- cali502fc901a2f any anywhere anywhere [goto] /* cali:O56T30sbnPqc_tSi */
0 0 cali-fw-cali5374357b2dd all -- cali5374357b2dd any anywhere anywhere [goto] /* cali:WL1M67_HpSDOLRxx */
0 0 cali-fw-cali57581718244 all -- cali57581718244 any anywhere anywhere [goto] /* cali:p1G-k0BODqm3uQSR */
0 0 cali-fw-cali5ed4c1e9a39 all -- cali5ed4c1e9a39 any anywhere anywhere [goto] /* cali:PxOtWTHlTQQkfHgO */
0 0 DROP all -- any any anywhere anywhere /* cali:knA7AEysV_xPu6ld */ /* Unknown interface */
Chain cali-from-wl-dispatch-6 (1 references)
pkts bytes target prot opt in out source destination
6 492 cali-fw-cali609774fb6ac all -- cali609774fb6ac any anywhere anywhere [goto] /* cali:LApTFxA3Qdtf49bZ */
2 139 cali-fw-cali6099c4a8778 all -- cali6099c4a8778 any anywhere anywhere [goto] /* cali:IJoQaxNJxgIlrbXJ */
0 0 cali-fw-cali669be974601 all -- cali669be974601 any anywhere anywhere [goto] /* cali:_Z8ak2rfRmMzIHki */
0 0 cali-fw-cali6c3741a667a all -- cali6c3741a667a any anywhere anywhere [goto] /* cali:bMnKIYn5O39xs2cW */
0 0 cali-fw-cali6d815386f40 all -- cali6d815386f40 any anywhere anywhere [goto] /* cali:ob50FxezVZNDtI-I */
0 0 cali-fw-cali6e9e9baed01 all -- cali6e9e9baed01 any anywhere anywhere [goto] /* cali:rtKyrV4r3bxOz9Z5 */
0 0 DROP all -- any any anywhere anywhere /* cali:crYUQMQrh1ElV3Xn */ /* Unknown interface */
Chain cali-from-wl-dispatch-7 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali701e7cc6c80 all -- cali701e7cc6c80 any anywhere anywhere [goto] /* cali:ho3cxUKSJA-TP9q1 */
0 0 cali-fw-cali736792029c9 all -- cali736792029c9 any anywhere anywhere [goto] /* cali:azXeYZeTzQPykY4- */
0 0 cali-fw-cali741adbc0280 all -- cali741adbc0280 any anywhere anywhere [goto] /* cali:QkHGxYSZcl6iTxlz */
0 0 cali-fw-cali7b7a4c8576a all -- cali7b7a4c8576a any anywhere anywhere [goto] /* cali:WkQaV7uLljIZkZmi */
0 0 DROP all -- any any anywhere anywhere /* cali:X9m7I-rAy3PvDZYO */ /* Unknown interface */
Chain cali-from-wl-dispatch-8 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali81ba87c5c60 all -- cali81ba87c5c60 any anywhere anywhere [goto] /* cali:1aA21O_Uxd_9UMSD */
0 0 cali-fw-cali82b79fb83c5 all -- cali82b79fb83c5 any anywhere anywhere [goto] /* cali:3Oeoax9KMfOBZij4 */
0 0 cali-fw-cali83c474a3c81 all -- cali83c474a3c81 any anywhere anywhere [goto] /* cali:P8Wf9N7jrpfRF0Dp */
0 0 cali-fw-cali8706671fffc all -- cali8706671fffc any anywhere anywhere [goto] /* cali:sJVXen5lhrbBDlgb */
0 0 cali-fw-cali8d4a964a1b2 all -- cali8d4a964a1b2 any anywhere anywhere [goto] /* cali:zkkwbxtuxOmXkmPR */
0 0 DROP all -- any any anywhere anywhere /* cali:aPsqNYFsrzlbX0fF */ /* Unknown interface */
Chain cali-from-wl-dispatch-9 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-cali91725ef2e87 all -- cali91725ef2e87 any anywhere anywhere [goto] /* cali:BHwb7s63OmqBQgYL */
0 0 cali-fw-cali9633dc47c02 all -- cali9633dc47c02 any anywhere anywhere [goto] /* cali:8vT58HWdelc2cdBR */
0 0 cali-fw-cali9986e181eac all -- cali9986e181eac any anywhere anywhere [goto] /* cali:smEIqbJbLmb2a9Dh */
0 0 cali-fw-cali99c2052d800 all -- cali99c2052d800 any anywhere anywhere [goto] /* cali:ttPzcRUYV15C44Ig */
0 0 cali-fw-cali9c22f997550 all -- cali9c22f997550 any anywhere anywhere [goto] /* cali:Nx90iGPvPBwuw2PW */
0 0 cali-fw-cali9c9451f75ea all -- cali9c9451f75ea any anywhere anywhere [goto] /* cali:1Dt0GR2Bkx811qVj */
0 0 DROP all -- any any anywhere anywhere /* cali:W5QTtfQR36t823qh */ /* Unknown interface */
Chain cali-from-wl-dispatch-b (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-calib19e4206d8c all -- calib19e4206d8c any anywhere anywhere [goto] /* cali:FmchMGGDXuXLUXMI */
0 0 cali-fw-calib4366e6156c all -- calib4366e6156c any anywhere anywhere [goto] /* cali:ETbZd4EPu9yPdgE6 */
0 0 cali-fw-calibbfcc132cfe all -- calibbfcc132cfe any anywhere anywhere [goto] /* cali:7503RYU3ir7v48AC */
0 0 DROP all -- any any anywhere anywhere /* cali:k_-xj5L4tuw3piFq */ /* Unknown interface */
Chain cali-from-wl-dispatch-d (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-calid1d7cde9caf all -- calid1d7cde9caf any anywhere anywhere [goto] /* cali:LgTTAtZf05otDEHa */
0 0 cali-fw-calid41ffc7ab4f all -- calid41ffc7ab4f any anywhere anywhere [goto] /* cali:Nb1vmeVpCimLe2AY */
0 0 DROP all -- any any anywhere anywhere /* cali:zxdjGXuLuIC06XJ1 */ /* Unknown interface */
Chain cali-from-wl-dispatch-e (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-calie02f19b12c9 all -- calie02f19b12c9 any anywhere anywhere [goto] /* cali:5N0J9-zEXuy3FYWf */
0 0 cali-fw-calie0317e52f89 all -- calie0317e52f89 any anywhere anywhere [goto] /* cali:AgbDoRolFU62zTEl */
0 0 cali-fw-calie1470bf4a1a all -- calie1470bf4a1a any anywhere anywhere [goto] /* cali:OeEqj0ITy8sVFVSg */
0 0 cali-fw-calie33122e4c45 all -- calie33122e4c45 any anywhere anywhere [goto] /* cali:KJ_qCTZ7SDLIxcCB */
0 0 cali-fw-calie6cedf7bf9e all -- calie6cedf7bf9e any anywhere anywhere [goto] /* cali:I-IrpvSaSdCnUqmF */
0 0 DROP all -- any any anywhere anywhere /* cali:4tM6rHE-xDZK-rES */ /* Unknown interface */
Chain cali-from-wl-dispatch-f (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-fw-calif9c0036887f all -- calif9c0036887f any anywhere anywhere [goto] /* cali:Rv6009ZbqKbL2WGX */
0 0 cali-fw-califa6bc0a3251 all -- califa6bc0a3251 any anywhere anywhere [goto] /* cali:cAgh27QlGJpJQEA3 */
0 0 DROP all -- any any anywhere anywhere /* cali:CwIDouq15-0IRsiu */ /* Unknown interface */
Chain cali-fw-cali01ca0d88e23 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:FEGmjjlSfUKtSm_9 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:h3SAcCk4U62eydeq */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:RRLJRRU2Z_Hy3P37 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:l4GAJjqfHY2_x1Ip */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:IZEJEM2PHHxPa8OG */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:dzKCp5-KLuWi4d-i */
0 0 RETURN all -- any any anywhere anywhere /* cali:iL8-cw6ciHJyDlKb */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:JtUF_lPjYY51165b */
0 0 RETURN all -- any any anywhere anywhere /* cali:t09MtRU_35pD4hSU */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:OQFV38frtWoxx_md */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:rfBJDpYWibe3EhD6 */ /* Drop if no profiles matched */
Chain cali-fw-cali01e885824be (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:KIjvlL9hSHz04JUp */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:T6L0fDn3v0ojvVT_ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:kspRbWlpAdErwbhv */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:ZvLRxwkEeJxqoVXS */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:cUQPbDcURkCEEhqP */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:j9BgmOsw4LcJu8yB */
0 0 RETURN all -- any any anywhere anywhere /* cali:t_F4yzQXvuy2650a */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:kmKIOoofp0JSsZpE */
0 0 RETURN all -- any any anywhere anywhere /* cali:zBpOEDoW9MjoYR_a */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:U-oT8hGdGDh3PnaW */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:lfc1-GABVeKasw5d */ /* Drop if no profiles matched */
Chain cali-fw-cali049f31cdaa2 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:73tzMlFZwK6-Fogg */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:4vqMhPtQPKJimFS0 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:buf4kL_n2yLTPDAv */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:o_zFbHq6oSDTcW3D */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:3e-DgmKo0PYl1S2y */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:YLaMkqrS8ZSIMG0i */
0 0 RETURN all -- any any anywhere anywhere /* cali:F9qei-mrxLReamJQ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:UaNblfixy4M2Jt7K */
0 0 RETURN all -- any any anywhere anywhere /* cali:-dASNgwMfPq0ZaKA */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:O2NSKv3qUMV2pBCb */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:h1SrfWXEbNGMcFJI */ /* Drop if no profiles matched */
Chain cali-fw-cali0576c91a912 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:AGft5swBqalHaUvY */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:-sgul9IPlt_suwMQ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:6WMPwdPL5coCK1-l */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:BDPHC2YcO6KLsi_6 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:TyDvHbrXXMBqGxgb */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:J19GS2XNPBXT-upU */
0 0 RETURN all -- any any anywhere anywhere /* cali:vOP6L4IlkZoNzLrx */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:CZ-ho0j2giJwLTy1 */
0 0 RETURN all -- any any anywhere anywhere /* cali:XrC94Lhumbt1L03j */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:4Wu0APZiWN7Up1Ti */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:YQ0lXi54fdf40Bxo */ /* Drop if no profiles matched */
Chain cali-fw-cali06114a20c1e (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:LELr1M5n-r-N72QU */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:QAChoomX70U8AA9D */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:oG7POCqcl4l10uLH */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:Kchug3EqwPK3gcVE */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:v8ULMbseL3JYd6D7 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:dCh75DDf52D_1l-B */
0 0 RETURN all -- any any anywhere anywhere /* cali:_2O5sT5G2QxlBd9J */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:CDWW9SxFEr13YUxL */
0 0 RETURN all -- any any anywhere anywhere /* cali:KkTySAT9o0aXzOkM */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:iPKQ_57m73br_DHw */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:AHrNg27ZiOb6M2Z9 */ /* Drop if no profiles matched */
Chain cali-fw-cali06aac5ed2e0 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:XOFLWXO7-mslzo1g */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Ll0UlENmL6pzojpF */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:fNDDPFqKVe9o0haP */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:8GfWMzSWNm2_cwwE */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:vsXDAyZwZlkxoxQ4 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 MARK all -- any any anywhere anywhere /* cali:yQopE5G-ps70dxFE */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-po-_YYnSgB46MA1TYU44kJq all -- any any anywhere anywhere /* cali:KnwLLVbzYvW7KQXB */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:A1snBmfFQM5lm5AT */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:mS3UA53RobyeYEzc */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:4CjCBGdO3vd7F2sb */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pro-kns.calico-system all -- any any anywhere anywhere /* cali:kAdXR-EJZJXEDx5v */
0 0 RETURN all -- any any anywhere anywhere /* cali:DDhIRdWqr-XT7gHY */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_jtt6i-KVVwZ-74H4ov all -- any any anywhere anywhere /* cali:hahnV-8t-uT1FKTb */
0 0 RETURN all -- any any anywhere anywhere /* cali:KHX9PyxjdDoXxRiD */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:jgIAkYDvbRAPwzQG */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:TqjHYmLLfECYWY4P */ /* Drop if no profiles matched */
Chain cali-fw-cali11a5a48ff09 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:5Hf5PMdFbCBQEpV_ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:rPOEuDKpPY4woWux */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:-cN2JqnQnhLViAsy */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:FGoGKSgecwRxymSf */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:o1c1tLvHEX4DlmZZ */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:XBtN0931F4v0pYc2 */
0 0 RETURN all -- any any anywhere anywhere /* cali:qzGToAxrpd9w-QJF */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:2o-1EP65qWjh7sG8 */
0 0 RETURN all -- any any anywhere anywhere /* cali:CK6WaKa4FkHE24m6 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:NZeKjlw0xuTd4EG5 */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:4ifv9cxSn7ZtmelZ */ /* Drop if no profiles matched */
Chain cali-fw-cali12e0df46963 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:XcUM-XSdYrBhIw7L */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:qOc1JG9HsqqYgjhb */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:sejvc7xztRMkvykV */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:0ufRiRpEj0VHAOHk */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:nzJJhxWBHcynNv9L */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:1RVuvSrQ-EdMCn3F */
0 0 RETURN all -- any any anywhere anywhere /* cali:GaaZE_uPw-udF257 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:hkkWqKC0reKbqfFV */
0 0 RETURN all -- any any anywhere anywhere /* cali:5-kXitA4-WNT82sX */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:-3w98wucQsmKf8Uq */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:OLf0sKhE20LlXSR- */ /* Drop if no profiles matched */
Chain cali-fw-cali13f46d88cc9 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:0E-bv5ssrq7Il_eM */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:QslpdjwzJCyzKEDf */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:KqZJAR_mknkIRb_D */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:cM3J0rbMT7mVUf_O */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:6L0ZEIJ22JE8b45Q */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:T5b8Bcs6CZ9rHccB */
0 0 RETURN all -- any any anywhere anywhere /* cali:9R8ncCoaNVkeBSp3 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:4gVV6OTKhqwoUuQ1 */
0 0 RETURN all -- any any anywhere anywhere /* cali:QrhHrlCZHeZzXy_G */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:oZAAr5Hh4ej9jtZe */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:81Gwnr8QCwS6r4Y6 */ /* Drop if no profiles matched */
Chain cali-fw-cali145de1560bc (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:aFAU20H4ENzEJfp2 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:J3uyKiC6ceOVhLHW */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:MOrnrKYWJdgI9aRy */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:wf_9oSM43DBma95j */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:ieUSwVUXvGPVQHzX */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:p_jIJaPvwieZpQdU */
0 0 RETURN all -- any any anywhere anywhere /* cali:TqlM49kAgKmF9nLM */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:Crq-Qkxd8WSSdKJ- */
0 0 RETURN all -- any any anywhere anywhere /* cali:tKUxcFDEn8ZkT9xi */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:7HSh0VcduQIvPDYX */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:J7vz6PxmnOBn-Ag2 */ /* Drop if no profiles matched */
Chain cali-fw-cali16870f08964 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:5y5ozlKMIZuAd10a */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:G82KddmZgxV_Nhek */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:_8APs9NcjaZ-jrex */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:2WsCO-EO7NqwU9gm */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:y1elzkT89dAQzTsm */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:_D1EBB2uqk7YRpM9 */
0 0 RETURN all -- any any anywhere anywhere /* cali:FchABOhyZlriwZ8_ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:7hUdMMl2rzdPPEhZ */
0 0 RETURN all -- any any anywhere anywhere /* cali:aBXU2oW0cLHSLSQ9 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:WyZNDhw-_jv4zkUV */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:dcb2rwqAxHd5PeUy */ /* Drop if no profiles matched */
Chain cali-fw-cali193f7d98be3 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:7-_vtxx0UcyApVcq */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:0hfbrpGkPG2LGpMN */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:NCANxg-cdT4yEwaN */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:8S0Qey_jUt18eahl */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:VndnaJZb6VTZvVJL */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:Se2N8XZfchupaoT2 */
0 0 RETURN all -- any any anywhere anywhere /* cali:sehfD-FVh2959pEB */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:BDRbNWS8XYNN6vUX */
0 0 RETURN all -- any any anywhere anywhere /* cali:31SR-ahwG7EJYO4u */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:fL0LLxqm0DDRAUou */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:Ck8PQ8zKyxffMXSr */ /* Drop if no profiles matched */
Chain cali-fw-cali1a3c10d6230 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:uy42r2KHT83zOFYf */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:-K_1PEGifghvhnCK */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:f7aF-IkLvIgek1iS */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:aKojsZl3QfnE6E87 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:UJYWg5G0o27ySjnY */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:GETSZWK4ReH_I-my */
0 0 RETURN all -- any any anywhere anywhere /* cali:jALGG5Pf2p9WXJP2 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:Pi9VyCtm8ngEg15H */
0 0 RETURN all -- any any anywhere anywhere /* cali:5tu_26Qf_4SVtRTT */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:Ow_VHnIzTTPBw8Nv */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:rreJjSh3-rokw_ft */ /* Drop if no profiles matched */
Chain cali-fw-cali1a421c33dfc (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:TMnLAexIO1oxTHXo */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:j4j1maTdLFNKU_eP */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:JTBOvBzcU4RRrokK */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:eoxDa6YoNQObMUDn */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:rGZuj4AFtSfbhxUe */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:0TkitwtdC-ylQFnH */
0 0 RETURN all -- any any anywhere anywhere /* cali:1ivshxy5ma5SEtJy */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:Y8P8oWSFvZykNDDq */
0 0 RETURN all -- any any anywhere anywhere /* cali:beaju9Fv60AYYjYF */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:-pHpNtCb6VCkYptA */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:0MoGdi8iErIZmbZm */ /* Drop if no profiles matched */
Chain cali-fw-cali22e016245eb (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:FjMnbD75ezv7Z1GN */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:9jmVrv8VVLn_bsKK */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:_LbBcIWSGau6Taze */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:sw5U1tImutUjs0Lj */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:4G_ttdJbJYyKM1Ko */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:PvVB96NanHEZ1-SE */
0 0 RETURN all -- any any anywhere anywhere /* cali:CatG9axj7_YLfdVF */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:s1s4CETSEm8hN3Zd */
0 0 RETURN all -- any any anywhere anywhere /* cali:HyZ0RFTL6ObrlEPQ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:sfbkiIWDJZf4J085 */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:W11j6WbTmOZ0KM6l */ /* Drop if no profiles matched */
Chain cali-fw-cali2ea845f9301 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:eddd5cGXJcdX98-4 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:r8nZiQqaCi3wAW0o */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:8AT1tCOT1OLNbBxv */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:ukT02yeiANfNtdV1 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:XRXRl4yflCpYnv24 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:cFgVW28blGxsMzps */
0 0 RETURN all -- any any anywhere anywhere /* cali:Z9-M-p4whEv5iwSi */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:Ok7RLEdkMVFvmNwk */
0 0 RETURN all -- any any anywhere anywhere /* cali:XZXFgA9ilLLddE-f */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:J0qYjt13jtbA0S24 */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:daRTD5QM-gW9XYQU */ /* Drop if no profiles matched */
Chain cali-fw-cali34bca5edd1b (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:daSqqSpNuVLANwS6 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:KmW7KoKYTfnXHKIg */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:nEqiSjtAKG5UD8MF */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:74n2npN4ODMNyWUR */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:iVTa83eJFOWsdsMq */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:peqqnrOqk0ql3Gt1 */
0 0 RETURN all -- any any anywhere anywhere /* cali:usV93TRyuCglU78x */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:_vpwLSgdEJtGYkzH */
0 0 RETURN all -- any any anywhere anywhere /* cali:Txu6JjkllUPxpPGZ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:EJAnml4PNu4BK_aI */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:ieHcH6jJMbRHmqds */ /* Drop if no profiles matched */
Chain cali-fw-cali3dd65087074 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:PUJvSMX7YkTyTOjI */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:4eE9-JRAJrSTWB7i */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:wSQymnRjqAQxbR3H */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:4X0Hdl3YlZ8ocB3u */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:3FXnlr7K3dpSxj5L */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:5hxymPbVPepBFFnO */
0 0 RETURN all -- any any anywhere anywhere /* cali:1K9DC-BIy8ySyAWs */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:UIQzr4Sur3P80CU0 */
0 0 RETURN all -- any any anywhere anywhere /* cali:2xveTbrf_u448PQK */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:WOOEKOguj8lrAa4w */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:dCvkmy1sbkkX6lGP */ /* Drop if no profiles matched */
Chain cali-fw-cali4272878fdab (2 references)
pkts bytes target prot opt in out source destination
1246 144K ACCEPT all -- any any anywhere anywhere /* cali:k9XmwBHSNT3utOPl */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:bvPuWlKmajjjxDCF */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:sr-Ckoqv1lOo1Zlm */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:d98H44hzv5iLt6H7 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:lj6f4_R85i5Y40ys */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.calico-system all -- any any anywhere anywhere /* cali:FoR0X-GlJCq4EyBR */
0 0 RETURN all -- any any anywhere anywhere /* cali:FnP5VhEGcvJ-XO2P */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_nzzjLvInId1gPHmQz_ all -- any any anywhere anywhere /* cali:dbJeSAkATF1EKXWi */
0 0 RETURN all -- any any anywhere anywhere /* cali:cxBZhVNvQgdeDIP1 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:HHIrqGl8cEckkdfH */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:OsI_JftO9st35RQh */ /* Drop if no profiles matched */
Chain cali-fw-cali467b6a1f983 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:UFR-d0uhQMFHgqmH */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:cjozQSUVe5cF8r9z */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:n6_Q_uMd4I3tgBOV */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:R1RwJw7tgKedWP8A */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:wSR6EM5c9AYLEKZR */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:Sq0-vmEMXK1_3V6d */
0 0 RETURN all -- any any anywhere anywhere /* cali:xIwdcqnL5jM0TZor */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:sTahhEGfq2KDVczZ */
0 0 RETURN all -- any any anywhere anywhere /* cali:ULwbs86N58p0GZcW */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:5UomYASEDk5LcGpb */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:Jjvicz5NK_M-H9zq */ /* Drop if no profiles matched */
Chain cali-fw-cali502fc901a2f (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:IJj19RHe2-8cXqqy */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:jZDvnXBbL2EE8MMB */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:4aawg1c8g7liL_zx */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:c0GCtdXib0H4URYA */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:IPS5RCslkVscMj5t */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:iBJUUYyVsCrJg16N */
0 0 RETURN all -- any any anywhere anywhere /* cali:A5DXtYrl0alzfvTy */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:q10rintT2UpyUey3 */
0 0 RETURN all -- any any anywhere anywhere /* cali:kal2IurQzvd3uyaD */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:sg-ryOUDp1S8jEdb */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:ddlC2ailRy-1WbYn */ /* Drop if no profiles matched */
Chain cali-fw-cali5374357b2dd (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:cMObnzi5iMtt55jk */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:4YqOxviXJce-vBtz */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:4gcGg7LWxBjpjwkx */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:HUtiFpZQKjWoT-oE */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:Az3aZeafVoNfbUc0 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:a3GXLyUrPp38AYGv */
0 0 RETURN all -- any any anywhere anywhere /* cali:bFee2tpbdEai2IG7 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:zfMJnSt521-M5ix1 */
0 0 RETURN all -- any any anywhere anywhere /* cali:lBcJM-bCDPuFiGQZ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:9ntqdfXjwhzMYbgd */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:VRDDh9Cw5uDiiWJD */ /* Drop if no profiles matched */
Chain cali-fw-cali57581718244 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:w3G8_qhXo_EKxnsb */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:OKxRufazVy_sgIuM */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:wyo5hsslziA-Wif_ */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:uu4oe3ZVF7PwvalH */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:0Ko3fW6-Chg7PB7x */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:hTQkJzp2CmI1TiLB */
0 0 RETURN all -- any any anywhere anywhere /* cali:FhhwZhbxcKVdXp-8 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:OWDJNgBp5HflaYbH */
0 0 RETURN all -- any any anywhere anywhere /* cali:-NRAa0PY1xsWqfhv */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:IUrFujaSOiSdRU3c */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:WHgKE3H3u4ve2_-E */ /* Drop if no profiles matched */
Chain cali-fw-cali5ed4c1e9a39 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:U4NgOVtHRdXOWOOJ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:2YOJAfJRmOEt_Ikw */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:K-8wlsFWBdLfEI1t */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:n_9Ym6DedHAfYmOJ */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:KMBeExy0_b8r9xyX */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:KJmbJKOYkwl_oM-C */
0 0 RETURN all -- any any anywhere anywhere /* cali:0hhc_Vd3ZU_YAlrV */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:NJonwlEOrGU-yxeq */
0 0 RETURN all -- any any anywhere anywhere /* cali:L279dMQkfQmw2gwJ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:xPaZsx-n9sTIubUh */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:JuNVf6V65ILaihrX */ /* Drop if no profiles matched */
Chain cali-fw-cali609774fb6ac (2 references)
pkts bytes target prot opt in out source destination
596 52032 ACCEPT all -- any any anywhere anywhere /* cali:deNQP_3cY7m5QCF6 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:MZCLKxhSLnAH2HXB */ ctstate INVALID
5 452 MARK all -- any any anywhere anywhere /* cali:nOleuk1YABYIjuzP */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:tANFA9tQzyyw8Ge0 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:zAOWlskE17q6kgSe */ /* Drop IPinIP encapped packets originating in workloads */
5 452 cali-pro-kns.kube-system all -- any any anywhere anywhere /* cali:-kPa_LoE-aI0ETIY */
5 452 RETURN all -- any any anywhere anywhere /* cali:0xMI5-xW7QQg3CRA */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:L0MTFNMklWblOnhY */
0 0 RETURN all -- any any anywhere anywhere /* cali:K_Waz3VkTCygzmUb */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:q3tPa2RKWRfdyLkh */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:37R48PxhIUrOt-DB */ /* Drop if no profiles matched */
Chain cali-fw-cali6099c4a8778 (2 references)
pkts bytes target prot opt in out source destination
571 48970 ACCEPT all -- any any anywhere anywhere /* cali:EO5cZDN5AfPg1jRY */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:rkQazqqw4cTvSnkK */ ctstate INVALID
2 164 MARK all -- any any anywhere anywhere /* cali:yhF6feczwTnif02H */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:vrzAmEHarspGyTGa */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:K4QpReCGODGORii7 */ /* Drop IPinIP encapped packets originating in workloads */
2 164 cali-pro-kns.kube-system all -- any any anywhere anywhere /* cali:yLwYrgyZsA14c7Em */
2 164 RETURN all -- any any anywhere anywhere /* cali:kGZu-2JzGbM4eU04 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:b1l-Jw34EsOSgd4R */
0 0 RETURN all -- any any anywhere anywhere /* cali:LsdEEdkB3UnjiYDz */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:GNN5nRvptA-e7Tf6 */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:6Xzc7tgJyfZTJdt_ */ /* Drop if no profiles matched */
Chain cali-fw-cali669be974601 (2 references)
pkts bytes target prot opt in out source destination
97 13358 ACCEPT all -- any any anywhere anywhere /* cali:Jci-QJ8Nhq765fT8 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:ltV90xcAeEp2Vcbg */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:tVwu9y5k59tss6yO */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:b8wHJ-SBvOI09EzG */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:-Sc9mYIwtJr-WRMm */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.calico-system all -- any any anywhere anywhere /* cali:-Kq7dKSkhe3rlqO_ */
0 0 RETURN all -- any any anywhere anywhere /* cali:LVbb9ntu9SE_I_dR */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_eY4Bnp6m80Op5FOwqd all -- any any anywhere anywhere /* cali:rLcB-SxVWyp3UHhS */
0 0 RETURN all -- any any anywhere anywhere /* cali:_F3yCHsIFYW-vAbu */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:JkUNPu3SXtt8NJYa */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:hPjUnoFLmxkqXjRY */ /* Drop if no profiles matched */
Chain cali-fw-cali6c3741a667a (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:bkYoqLC6Cp774wkO */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:XnDopYaKQv7ScpBY */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:qGw_yHiWHnVVSDjy */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:6vCo9Np8WrkKU0SC */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:An2Y3mmfwjc1UEVB */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:L3ekP6UfMz_fc3su */
0 0 RETURN all -- any any anywhere anywhere /* cali:mUMbAJKNVMiaN4UB */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:c9s4LdAJ3JUOAdHa */
0 0 RETURN all -- any any anywhere anywhere /* cali:PjF-VU68RPtTEma0 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:jEAt24uNDlegUsbX */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:iOS_smxUsW4hYEM1 */ /* Drop if no profiles matched */
Chain cali-fw-cali6d815386f40 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:qgTFMwJMY7zKCSH_ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:t_LY8zQe5Y5jyIK3 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ab1nqKplhgDk-ukr */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:1zXT9uRY-lLgQDIT */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:wRbN_ODIKM4BHBA3 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:nVmJbudIDMQ3TnvN */
0 0 RETURN all -- any any anywhere anywhere /* cali:LdiTB7CEkem5vuUM */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:TWzZwdqexnn7vD2k */
0 0 RETURN all -- any any anywhere anywhere /* cali:Y7Onv1efdxy266Mq */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:LOF8kPjMVaDBE0Vo */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:vD8_FBv3_qDp7yb0 */ /* Drop if no profiles matched */
Chain cali-fw-cali6e9e9baed01 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ko_RUE6bRnNw9Awg */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:tSNljI5f7UTm-RBT */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:bNqaT62zZBrsHY-X */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:Ve_lgW_sjmXpfJzk */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:NmtsmEPDJM4FlXua */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:MNIYnvAM-BX2mXHO */
0 0 RETURN all -- any any anywhere anywhere /* cali:JZ7vWLkzX3IbEf2l */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:pt2Z0uH14sw0W7vA */
0 0 RETURN all -- any any anywhere anywhere /* cali:I5wbJvtNdf344kPM */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:yZV57wVGtmnRCfQa */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:-_aNDO4d7KyDHHk8 */ /* Drop if no profiles matched */
Chain cali-fw-cali701e7cc6c80 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:tTFsQ6gnLAkGMaNE */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:wLzclrhqL8YrInAU */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:9yp_Q0fV5nVV32ku */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:nE31_x9mHJOHajDn */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:IAfPzKemy_Gzcu96 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:1PXdT8jz0PfIdzEG */
0 0 RETURN all -- any any anywhere anywhere /* cali:HgGlVY2RWIx7C7yn */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:vKyi1t3pGWfQ8H8- */
0 0 RETURN all -- any any anywhere anywhere /* cali:YEPg99hQshQH7CdI */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:7ZTkik6zoJWy-RYL */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:ZZTrOlsN5Wqq-u6H */ /* Drop if no profiles matched */
Chain cali-fw-cali736792029c9 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:umnfuTkh6RRzNeW9 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:cGWG3Ub_e86jDVtq */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:gb3Wut7XpFkjoyTC */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:gn2IY1YcO6hHFHmf */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:4sRRvUdKLNCqsvqG */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:9oRsaDMTQG3jBLRo */
0 0 RETURN all -- any any anywhere anywhere /* cali:I2Zoq7LilB1ySfbj */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:nx2DsP7eNSVs-10H */
0 0 RETURN all -- any any anywhere anywhere /* cali:m2fvwQyxd9PtAlNw */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:2vNVoFFhCteY5dsU */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:vEsxKYhO0im8AAf_ */ /* Drop if no profiles matched */
Chain cali-fw-cali741adbc0280 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:UCzW_luizeTu0_Fa */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:9Nl0ZDi1VgfnGleh */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:sq9KLYoOX_re3lNh */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:Q9yYEAX2qyi1dvRR */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:Ey5hXGS6AxcrQZJC */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:YqUVWINoeFgbrE9O */
0 0 RETURN all -- any any anywhere anywhere /* cali:diczL-dIcYHCiWyt */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:4IAM7apnEtfCY7q4 */
0 0 RETURN all -- any any anywhere anywhere /* cali:GxopsWE7uRhosfRV */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:FvOyhn85zBQiY074 */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:cqIbl6IqfAQ3KPbT */ /* Drop if no profiles matched */
Chain cali-fw-cali7b7a4c8576a (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:54mBJu7UTxNKzuHv */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:CA-CfAV00TporwKL */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Nho0XqfAE9m65V6j */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:8yhfmnD8OIBZi3ei */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:hWATTdmmi8IKvJeF */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:T7gmEDklMpHYyxg5 */
0 0 RETURN all -- any any anywhere anywhere /* cali:QogmA9JRLmEp_hre */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:feagBUELC9zDdI04 */
0 0 RETURN all -- any any anywhere anywhere /* cali:kD5FhbI4khZBVP8j */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:1IWrNM4IhNqDAHLg */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:WkQj8l5dSWm3UAMe */ /* Drop if no profiles matched */
Chain cali-fw-cali81ba87c5c60 (2 references)
pkts bytes target prot opt in out source destination
1930 965K ACCEPT all -- any any anywhere anywhere /* cali:vCqamwKrVQ8k3Ox- */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:4nzp9kuyBs99j6Rm */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:wF3FgFvgE_Xoe9aL */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:1Ca7h1A1Qr0uiGnB */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:nqGI4XzPrADt3ODw */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:tvgmCuynMP8XucWh */
0 0 RETURN all -- any any anywhere anywhere /* cali:CoZViETAcJiGTrGX */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:YDl7x5itve0iVpu5 */
0 0 RETURN all -- any any anywhere anywhere /* cali:d5T8JDGRIXWxN9mo */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:MKxCDcBuD4DPZxsx */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:akuYyDzTmsyJqZiP */ /* Drop if no profiles matched */
Chain cali-fw-cali82b79fb83c5 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:7dNFD3BkvSUx7O9X */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:2btfAa5XDpbiCDvV */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:LlzBulbmLUI-b7i4 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:-sY8By-QZtCkp2ZT */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:3fH1IVKfsxuEZDuE */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:1XNup1i4NopKuH0a */
0 0 RETURN all -- any any anywhere anywhere /* cali:eshrJ2Mz41Vbz1by */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:KZtELyA_7RkO3qN2 */
0 0 RETURN all -- any any anywhere anywhere /* cali:dV0ZzTBE3Wj4fuhM */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:Gya_CtX7qNXKZhJP */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:kZoVNqO34PNtgORo */ /* Drop if no profiles matched */
Chain cali-fw-cali83c474a3c81 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:xIi8FgsOJrroN51h */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:gfe4PuCWE0jsaoo5 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:OO1i4ZOHeX2eJh2d */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:KL2PqeG_bZTIc3i1 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:nHkANJdtBcecg5-y */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:fV9HVKrCp3N_A6dI */
0 0 RETURN all -- any any anywhere anywhere /* cali:jt33eKdHDcFUdA9u */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:J9OGSJAaSbhTejZJ */
0 0 RETURN all -- any any anywhere anywhere /* cali:jA88b4HhLAjxZLdJ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:CumPaymhEwfCkkmS */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:93xhYP-jhBZ_SFew */ /* Drop if no profiles matched */
Chain cali-fw-cali8706671fffc (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:J-Ge02BVGTvS8buY */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:2EvkCAY3A8SIbC2i */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:p6NxNrYThR0H8bvo */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:s4iMNaa3Tia-cS1b */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:AoSjrj4x8gLG61AY */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:EfBhVoA32M_fK0Mj */
0 0 RETURN all -- any any anywhere anywhere /* cali:8sQ1PrBzVKkmdMpI */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:v-qQA57GUkROXW9Q */
0 0 RETURN all -- any any anywhere anywhere /* cali:8S-VUKWodC-GeBJK */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:3rBUExujmyVRv0Cv */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:m7W99t296GhUA_V7 */ /* Drop if no profiles matched */
Chain cali-fw-cali8d4a964a1b2 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:UBgfgVhRFtt80flb */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:nTHUAZAWGdsis0tn */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:lj-Im8S6d58cE_gF */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:ybmJXcEO_s63Q0IK */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:tR7dJJtNuE-GyMEV */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:Prh4pf7AuaXYCl2l */
0 0 RETURN all -- any any anywhere anywhere /* cali:dQrOM7Z_Dcb7gmha */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:dAkj_Qt2pgDvU8Bm */
0 0 RETURN all -- any any anywhere anywhere /* cali:Rp0BUbWaT8CZYSmA */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:4XuokgfBzUEWLjt9 */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:TOPnlSDPv_rEurbU */ /* Drop if no profiles matched */
Chain cali-fw-cali91725ef2e87 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:khycT1oaJhO2d5Xa */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:jM7fL7F27bsvbuye */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:8H7ZpLNW_Kl2kcWD */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:cWhXxCumY1PaC3NU */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:xfX8A44VDMGxEVJm */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:4GvqiIm7Mm9QNdSw */
0 0 RETURN all -- any any anywhere anywhere /* cali:sNsGafCLKJQ_6U8R */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:6BpUbm8XHnFZmrMy */
0 0 RETURN all -- any any anywhere anywhere /* cali:P6EWAS8kqpOCCxi2 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:YhypiNpStKZOQpKU */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:NzRo4efKR6rHdhI1 */ /* Drop if no profiles matched */
Chain cali-fw-cali9633dc47c02 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:9-hIZE0Tb1ICSdoM */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:bk05dFHmktPGw-eW */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:xiY2eaM8M-CnP3q1 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:yfQ-IHXaOpmcl8-z */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:ISsIRngCzZiMpDyc */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:-A41pjCnxlRh3JRm */
0 0 RETURN all -- any any anywhere anywhere /* cali:Sh5Y-xSBiJCd5DCN */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:sLM_LREe73rerBhp */
0 0 RETURN all -- any any anywhere anywhere /* cali:aYtKd_qLCEhCuME3 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:D_rUMMJEzobDMamW */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:EkEY7v_AeFNOyDPT */ /* Drop if no profiles matched */
Chain cali-fw-cali9986e181eac (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:1hFpNUb_-LYSJClb */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:G4d0hJJjR4TDM9Nq */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:HRJJmnGEtKBaVkRR */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:qva3IhRmEhwLd9I7 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:VsxqkNoR4QGGDPM0 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:hELB9ClYqsPop5Vy */
0 0 RETURN all -- any any anywhere anywhere /* cali:zrwxMFNL-s0BTnS7 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:XW06TD0LfQI6qoWD */
0 0 RETURN all -- any any anywhere anywhere /* cali:GSda8i0euSCpguY0 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:xppwpo80_BjYqVGn */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:Bzb9ckz0Ozz4y7xr */ /* Drop if no profiles matched */
Chain cali-fw-cali99c2052d800 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:bVCrjKZw9zQbFGAv */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:TkdMpUINyjWqjlHq */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:3t01LJnIrCtB-wr2 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:lmtdzBOa1hFbGn3_ */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:hvDda1sMpr8IHEA- */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:he77PF05iOp9pe73 */
0 0 RETURN all -- any any anywhere anywhere /* cali:97cGRV6IID0BYcVr */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:DYx_4xoOBWlABxP_ */
0 0 RETURN all -- any any anywhere anywhere /* cali:k24jY8MA-PxDDAtF */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:NM72qXqjEf8dLR-P */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:rag2ZNZHXdmofzOS */ /* Drop if no profiles matched */
Chain cali-fw-cali9c22f997550 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:PzchFMNAsQO3eaFZ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:u-zxlaUTkH9O2Sxc */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:D3diqK1MkkjeEsz7 */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:Tg5-wuHLh9M3zeyR */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:-r82-e-agA4oEG32 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:69EGCI3L9hIT-GFJ */
0 0 RETURN all -- any any anywhere anywhere /* cali:siE9JNcIi0fVI4Vq */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:u34nDNw9GYlV9E43 */
0 0 RETURN all -- any any anywhere anywhere /* cali:mK8j_uXWQ2jSA2WS */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:KT_Nv9s7Ae3LBmjt */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:tQ8_gnNxi4lnifw3 */ /* Drop if no profiles matched */
Chain cali-fw-cali9c9451f75ea (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:3K9tIDF9YeVtZnm7 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:TDUsa2tkTqEEZ9YG */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Xeo4oDaWq12BGAds */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:sUkLHw966hrj89al */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:xZzu8UaPNHwCLe8q */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:AuKkRTN5rTTGrEfq */
0 0 RETURN all -- any any anywhere anywhere /* cali:WgZBUr4uykNLpRPh */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:DZ-DdzO_tLKKngSb */
0 0 RETURN all -- any any anywhere anywhere /* cali:rDoyHXhHznruSEqd */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:Jno1KPkIyXcbA-tJ */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:DCNxEFtZ2SPhfQFb */ /* Drop if no profiles matched */
Chain cali-fw-caliac90068d900 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:7nCfTtFcUTQq2_JB */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:naALe6ULZxGmOrbl */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:guowgpdTV_4TgYdF */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:yA6shQVVJCxu8gvL */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:boZ842htx1L4ahjX */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:dY5sseQDJ0EDkqro */
0 0 RETURN all -- any any anywhere anywhere /* cali:NF3Gz5o7_uQRZSbI */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:6MHCja7XjNZJEXtD */
0 0 RETURN all -- any any anywhere anywhere /* cali:4pIRvXb7APFiY43h */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:rJSmTwVXdAJ41GTf */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:cgxTMccg2sWcT2g5 */ /* Drop if no profiles matched */
Chain cali-fw-calib19e4206d8c (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:OqPWN0x4rZEX3-dh */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:JGxL1okQ54P5qdsD */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:CqxzO81W3iJYqdIW */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:hJ04dty8QAJwng1V */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:HCbkiubLQvJqherX */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:QoaCVIvtEbI7Xqj9 */
0 0 RETURN all -- any any anywhere anywhere /* cali:bYmJeRBnDe3oTuAi */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:TDWys6G1AiE2gkLl */
0 0 RETURN all -- any any anywhere anywhere /* cali:ltyBqji7PaoaRY7Y */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:RC02AgE1QvSgAgP1 */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:2aKrv4DRxo0lwTBz */ /* Drop if no profiles matched */
Chain cali-fw-calib4366e6156c (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ah7WFIuI2vZlM25k */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:v47XSZnAgWRikjT0 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:oM8S1tY5jI2wOJBq */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:3ZdYg3lg4GTc78Mh */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:x8kdorTsdq6D67pJ */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:-J4LvCGsoi5AoW-_ */
0 0 RETURN all -- any any anywhere anywhere /* cali:07SrB5Kz5vTlJPvq */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:ydYwdVaZ3go_noiA */
0 0 RETURN all -- any any anywhere anywhere /* cali:PC2ZEDEw68rqyxGR */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:9O0JGWIq5kUm9BGA */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:70tA1hvm3wPNK7Ji */ /* Drop if no profiles matched */
Chain cali-fw-calibbfcc132cfe (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:7aP1efQyO2yIjrcZ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:XxH9-s9CLjFx8qw8 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Povm4JL3f4rQ6FCg */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:0rwcbBTGyLp_LUXL */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:WwDYGxdy0S8n8ev1 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:7IavR0bU5AawWQjB */
0 0 RETURN all -- any any anywhere anywhere /* cali:yjauJ87N8D0lpEWf */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:gxzEIu-_9jbOo4_e */
0 0 RETURN all -- any any anywhere anywhere /* cali:F296uKaRXVj1CLHr */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:dJbRkzuMLJ4M-_u- */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:i3SeYA3X17QggUcr */ /* Drop if no profiles matched */
Chain cali-fw-calic2b72c3abdd (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:BKHPPwRwEaea7T_Y */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Y7zDGUftNQNh7X7M */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:6JZpLu05vBu5dQyC */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:yncVrnp-uxRGE08B */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:sQp6cOaFxx_XeV7c */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:1yK_FT9LnDAXDP5I */
0 0 RETURN all -- any any anywhere anywhere /* cali:Op5bNQHXmncQH9xf */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:J7HArsfF0a7aVqo5 */
0 0 RETURN all -- any any anywhere anywhere /* cali:_yndiUNJNx6X3Ru_ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:qrSwawXXbWRAL-ZU */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:4uZv2IC5VpMW4QON */ /* Drop if no profiles matched */
Chain cali-fw-calid1d7cde9caf (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Z_L6GVhEfHFme43p */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:DS5f9KBZgvip15HJ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:LehptkjCH_RZY4YC */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:qctFT7Nkc4Yx61uW */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:OxyQpUZn9_-DfYnT */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.calico-system all -- any any anywhere anywhere /* cali:N80WZCBnwzMyH_Bj */
0 0 RETURN all -- any any anywhere anywhere /* cali:UDdYKQiaeoWZCnxx */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_ymJUz7yzI6NOKJhG2- all -- any any anywhere anywhere /* cali:sZZB0eMd059qZexl */
0 0 RETURN all -- any any anywhere anywhere /* cali:OP1Cs-oDL2Le1sL5 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:eYZCYMs1a-8kbKX_ */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:kFyRgTRcN7m8k-vA */ /* Drop if no profiles matched */
Chain cali-fw-calid41ffc7ab4f (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:82vGw10Hsp981u5k */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:jMdeGT2baGZ66rCw */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:_4kGKJ6rT2qfB3Uv */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:IL44vjeZC2kXQjcP */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:904ypNrA3ej6HUOf */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:j6pNzhOeDfcM6dd6 */
0 0 RETURN all -- any any anywhere anywhere /* cali:yQfI6UbBN22zzBZ- */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:ljI0nPnTT0LvMRDE */
0 0 RETURN all -- any any anywhere anywhere /* cali:dQJVzCy3EBPNxzek */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:b1kBzfEl2BCYMELe */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:LpH66cSjsk_xsy1k */ /* Drop if no profiles matched */
Chain cali-fw-calie02f19b12c9 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Ki2DWYPa9cllMqb3 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:pXnrYDmdk1MUs0Aa */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:hkKU2xFezu_BAeZl */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:ePR1w26HZQN_hbMr */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:HpRpDwD-ZSV92LEu */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:ZftaDNy5uhlkYnut */
0 0 RETURN all -- any any anywhere anywhere /* cali:IidBUk5HgiuBpnZ4 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:D7ptA1nBgBU5ycfB */
0 0 RETURN all -- any any anywhere anywhere /* cali:0uEoHrY0aSVtq13n */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:iwEjUBMbmoV3MmdF */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:dJpR7zzvEIZbC7OJ */ /* Drop if no profiles matched */
Chain cali-fw-calie0317e52f89 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:xTtFcs5DPWQDg9p5 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:5Kh29qJQkL2o0esm */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:d5xGAUToYNIU2V5b */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:V7ESNGLn_u8tHnIb */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:TdfV7wXRJeFQAx88 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:sHJKxPUFbkU-8qa4 */
0 0 RETURN all -- any any anywhere anywhere /* cali:B_PGaOEl0N8dcmJK */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:5nA7derCCdIROvCz */
0 0 RETURN all -- any any anywhere anywhere /* cali:meZgOHXH9LPFyRam */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:AxYLAQa9AX7UP2-E */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:kl20rfv5P0KSFagl */ /* Drop if no profiles matched */
Chain cali-fw-calie1470bf4a1a (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:CgGiR79gB7aI-qu7 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:alqAAi3u2oDHwuSX */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:SDsN1iO8eilBHBud */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:s-cNfnUk-gWnp-Ub */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:8yQg7coz0_A--XWM */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:wRBFmg9kHpjJDEN- */
0 0 RETURN all -- any any anywhere anywhere /* cali:TodL-314K-Z8r9hF */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:I53UZVUrek4U850n */
0 0 RETURN all -- any any anywhere anywhere /* cali:QlqQzWfWO857svfS */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:sDrW4GwuOZ75nVPG */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:72WC3GnNEUC9_iDt */ /* Drop if no profiles matched */
Chain cali-fw-calie33122e4c45 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:NCv1lotv0n2WxK8k */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:qHgQBq1YC1sH9ytg */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:LfCZqpgJ7Ss0yMSr */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:odSoKqqwBRf_SgCJ */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:ZgAcoJ2LG87ygUlj */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:MuHQGh3ELfAGblUA */
0 0 RETURN all -- any any anywhere anywhere /* cali:egw0s3TDi39_iBLL */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:_3_DjT9QxPV4XBvn */
0 0 RETURN all -- any any anywhere anywhere /* cali:L58BPxvm0UOLXwP5 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:awwz-QOEiRhfWgrm */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:hqoY90KAvJO2MxmV */ /* Drop if no profiles matched */
Chain cali-fw-calie6cedf7bf9e (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:3sVtJ7yuA9PVACca */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:eqTLgzR1HMqi1k7z */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:C6YVTnt65J7rsnAC */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:TgJU0CW_0m_yPrk6 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:bOvAnr5dGTM3d3g5 */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:JNjNCq9f1dcoOSLN */
0 0 RETURN all -- any any anywhere anywhere /* cali:o92or79epJsk45C6 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:eUXVsHjGggMGjXb4 */
0 0 RETURN all -- any any anywhere anywhere /* cali:ee1pf0H_P4GW6z7r */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:vhrJeyIAb0gEEhpo */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:99CO-mPlvivpTamx */ /* Drop if no profiles matched */
Chain cali-fw-calif9c0036887f (2 references)
pkts bytes target prot opt in out source destination
634 102K ACCEPT all -- any any anywhere anywhere /* cali:l2opPdEpcXJHaMvO */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:wrbenq7Cco33fl24 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:k1G-mJX0P7T5SHnd */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:n53l8qnjXgSfnmfx */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:OMs6KyMd26xVPPK_ */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:hucW3DhYBIym-vzb */
0 0 RETURN all -- any any anywhere anywhere /* cali:5VdOMla2bMloK3vc */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:Nx58-WGH01LZ4GRf */
0 0 RETURN all -- any any anywhere anywhere /* cali:vIZ3R5NCixZYm552 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:o-k6O8XjUmz5kYPV */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:B6eBWAugO3TbEYeC */ /* Drop if no profiles matched */
Chain cali-fw-califa6bc0a3251 (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:tHbwof4IvTvm29RZ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:PsX2nz8vKm6EDtc6 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:TeiKErIcAF8njZbO */ MARK and 0xfffcffff
0 0 DROP udp -- any any anywhere anywhere /* cali:OW7_0HOwf4v9JqVI */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789
0 0 DROP ipencap -- any any anywhere anywhere /* cali:kv9hhsCdcYv-cLhX */ /* Drop IPinIP encapped packets originating in workloads */
0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:g57PrsyZojPmdTXx */
0 0 RETURN all -- any any anywhere anywhere /* cali:iGigvLyK9e1BR3CU */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:xhxowQZbawbFKQnn */
0 0 RETURN all -- any any anywhere anywhere /* cali:6pJrYCYR41M0YAX9 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:Oi08OiEooQL99Nja */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:ORFP0dayvPWCIlqm */ /* Drop if no profiles matched */
Chain cali-pi-_FDiLImilezd09cpg5ci (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK tcp -- any any anywhere anywhere /* cali:wH4Z-YLtazvrkIUi */ /* Policy calico-apiserver/knp.default.allow-apiserver ingress */ multiport dports 5443 MARK or 0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:pV3tRI_BN9MkLz81 */ mark match 0x10000/0x10000 nflog-prefix "API0|calico-apiserver/knp.default.allow-apiserver" nflog-group 1 nflog-size 80
Chain cali-pi-_U7WUiLyTu5Vc3j6v19u (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK tcp -- any any anywhere anywhere /* cali:-1XSFfQZOlUTo8yH */ /* Policy calico-system/knp.default.goldmane ingress */ multiport dports 7443 MARK or 0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:EMIA5LQXZZkoiYUT */ mark match 0x10000/0x10000 nflog-prefix "API0|calico-system/knp.default.goldmane" nflog-group 1 nflog-size 80
Chain cali-pi-_YYnSgB46MA1TYU44kJq (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:JBv9xOy5yJdiWKiY */ /* Policy calico-system/knp.default.whisker ingress */
Chain cali-po-_YYnSgB46MA1TYU44kJq (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK tcp -- any any anywhere anywhere /* cali:WLeBgvgJTxHWj12b */ /* Policy calico-system/knp.default.whisker egress */ match-set cali40s:bgLSTkNhu0BKRQ9zwXjvfbX dst multiport dports 7443 MARK or 0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:ZCKHAWDzorg1xgU9 */ mark match 0x10000/0x10000 nflog-prefix "APE0|calico-system/knp.default.whisker" nflog-group 2 nflog-size 80
0 0 RETURN all -- any any anywhere anywhere /* cali:3UX05GcN2RCJ36oa */ mark match 0x10000/0x10000
0 0 MARK tcp -- any any anywhere anywhere /* cali:8bPWZZY0GvWgDVWB */ match-set cali40s:n27_8wNKytyIy8FV4MfcwNI dst multiport dports domain MARK or 0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:djKrvOA3jJyhyYiW */ mark match 0x10000/0x10000 nflog-prefix "APE1|calico-system/knp.default.whisker" nflog-group 2 nflog-size 80
0 0 RETURN all -- any any anywhere anywhere /* cali:ekAjEdOWCdE3pANn */ mark match 0x10000/0x10000
0 0 MARK udp -- any any anywhere anywhere /* cali:ew262h3gUE6ZESH4 */ match-set cali40s:n27_8wNKytyIy8FV4MfcwNI dst multiport dports domain MARK or 0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:oz5I3LtAEHtfHSTH */ mark match 0x10000/0x10000 nflog-prefix "APE2|calico-system/knp.default.whisker" nflog-group 2 nflog-size 80
Chain cali-pri-_4yi5_iSUAwsU8zMHTk (2 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:ZYnaZZFwsSjfXO4C */ /* Profile ksa.calico-apiserver.calico-apiserver ingress */
Chain cali-pri-_eY4Bnp6m80Op5FOwqd (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:jyhZblM1OzY4DUqi */ /* Profile ksa.calico-system.goldmane ingress */
Chain cali-pri-_jtt6i-KVVwZ-74H4ov (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:No_RDbsVx31noDvv */ /* Profile ksa.calico-system.whisker ingress */
Chain cali-pri-_kJqfZpgUe7r2t4A-14 (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:IQx0SzlDGn6BPv0A */ /* Profile kns.calico-apiserver ingress */ MARK or 0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:dHGDmF90Anl0gS_s */ mark match 0x10000/0x10000 nflog-prefix "ARI0|kns.calico-apiserver" nflog-group 1 nflog-size 80
Chain cali-pri-_nzzjLvInId1gPHmQz_ (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:UQoEf2WCdU0bPTCb */ /* Profile ksa.calico-system.calico-kube-controllers ingress */
Chain cali-pri-_u2Tn2rSoAPffvE7JO6 (2 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:WqgznqAQ-uYV0oBx */ /* Profile ksa.kube-system.coredns ingress */
Chain cali-pri-_ymJUz7yzI6NOKJhG2- (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:52zm9tLYY65R0fSD */ /* Profile ksa.calico-system.csi-node-driver ingress */
Chain cali-pri-kns.calico-system (4 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:hLANj-OVIyT53h_j */ /* Profile kns.calico-system ingress */ MARK or 0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:eDg78bIqr5YAUJqq */ mark match 0x10000/0x10000 nflog-prefix "ARI0|kns.calico-system" nflog-group 1 nflog-size 80
Chain cali-pri-kns.kube-system (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:J1TyxtHWd0qaBGK- */ /* Profile kns.kube-system ingress */ MARK or 0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:GulrEF2fpGf_rDXZ */ mark match 0x10000/0x10000 nflog-prefix "ARI0|kns.kube-system" nflog-group 1 nflog-size 80
Chain cali-pri-kns.test1 (51 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:JqCDFisbXDx5WOXd */ /* Profile kns.test1 ingress */ MARK or 0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:Bwm55l0eaagqw1LU */ mark match 0x10000/0x10000 nflog-prefix "ARI0|kns.test1" nflog-group 1 nflog-size 80
Chain cali-pri-ksa.test1.default (51 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:0vNS2XLcHWR92ENw */ /* Profile ksa.test1.default ingress */
Chain cali-pro-_4yi5_iSUAwsU8zMHTk (2 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:Pp_dQp2FeNabRhyi */ /* Profile ksa.calico-apiserver.calico-apiserver egress */
Chain cali-pro-_eY4Bnp6m80Op5FOwqd (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:2fVOokqK7Gq6i9oT */ /* Profile ksa.calico-system.goldmane egress */
Chain cali-pro-_jtt6i-KVVwZ-74H4ov (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:57j7D-KvPIuU1Pml */ /* Profile ksa.calico-system.whisker egress */
Chain cali-pro-_kJqfZpgUe7r2t4A-14 (2 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:_cFTxC141wwWRzyZ */ /* Profile kns.calico-apiserver egress */ MARK or 0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:f0yo1d83bjuf3_XV */ mark match 0x10000/0x10000 nflog-prefix "ARE0|kns.calico-apiserver" nflog-group 2 nflog-size 80
Chain cali-pro-_nzzjLvInId1gPHmQz_ (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:5bHxBXLMkJKgC6dk */ /* Profile ksa.calico-system.calico-kube-controllers egress */
Chain cali-pro-_u2Tn2rSoAPffvE7JO6 (2 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:0-_UPh39dt5XfhmJ */ /* Profile ksa.kube-system.coredns egress */
Chain cali-pro-_ymJUz7yzI6NOKJhG2- (1 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:yuJvAdyU1LYltt-O */ /* Profile ksa.calico-system.csi-node-driver egress */
Chain cali-pro-kns.calico-system (4 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:gWxJzCZXxl31NR0P */ /* Profile kns.calico-system egress */ MARK or 0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:AEuaZm2Broif1jyV */ mark match 0x10000/0x10000 nflog-prefix "ARE0|kns.calico-system" nflog-group 2 nflog-size 80
Chain cali-pro-kns.kube-system (2 references)
pkts bytes target prot opt in out source destination
7 616 MARK all -- any any anywhere anywhere /* cali:tgOR2S8DVHZW3F1M */ /* Profile kns.kube-system egress */ MARK or 0x10000
7 616 NFLOG all -- any any anywhere anywhere /* cali:FNtcg_qkksn6zdBc */ mark match 0x10000/0x10000 nflog-prefix "ARE0|kns.kube-system" nflog-group 2 nflog-size 80
Chain cali-pro-kns.test1 (51 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:Ta4QHZbv1h3hFe9O */ /* Profile kns.test1 egress */ MARK or 0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:6brBGYtnODCsI6Qn */ mark match 0x10000/0x10000 nflog-prefix "ARE0|kns.test1" nflog-group 2 nflog-size 80
Chain cali-pro-ksa.test1.default (51 references)
pkts bytes target prot opt in out source destination
0 0 all -- any any anywhere anywhere /* cali:QuhddfYRcL-ihmo2 */ /* Profile ksa.test1.default egress */
Chain cali-set-endpoint-mark (3 references)
pkts bytes target prot opt in out source destination
0 0 cali-set-endpoint-mark-0 all -- cali0+ any anywhere anywhere [goto] /* cali:UsDHcHwRpNwwYlaM */
0 0 cali-set-endpoint-mark-1 all -- cali1+ any anywhere anywhere [goto] /* cali:TyIZV8TS2_K6WG15 */
0 0 cali-set-endpoint-mark-2 all -- cali2+ any anywhere anywhere [goto] /* cali:o8ssChHuhwuER1U6 */
0 0 cali-set-endpoint-mark-3 all -- cali3+ any anywhere anywhere [goto] /* cali:3uf05gs_oAKFSiUO */
0 0 cali-set-endpoint-mark-4 all -- cali4+ any anywhere anywhere [goto] /* cali:oA2JdvSY66BUMFHM */
0 0 cali-set-endpoint-mark-5 all -- cali5+ any anywhere anywhere [goto] /* cali:_CtLu9Y-YU2YANoM */
0 0 cali-set-endpoint-mark-6 all -- cali6+ any anywhere anywhere [goto] /* cali:6cBOETUFFznDQ3Xy */
0 0 cali-set-endpoint-mark-7 all -- cali7+ any anywhere anywhere [goto] /* cali:-U0DnBFYkv3wH__2 */
0 0 cali-set-endpoint-mark-8 all -- cali8+ any anywhere anywhere [goto] /* cali:yshtsR1UXXo3sErr */
0 0 cali-set-endpoint-mark-9 all -- cali9+ any anywhere anywhere [goto] /* cali:_F720ECM6ujloU3N */
0 0 cali-sm-caliac90068d900 all -- caliac90068d900 any anywhere anywhere [goto] /* cali:g-QZFYAqkpfWWPgB */
0 0 cali-set-endpoint-mark-b all -- calib+ any anywhere anywhere [goto] /* cali:odIDv_6yAn--Y8N_ */
0 0 cali-sm-calic2b72c3abdd all -- calic2b72c3abdd any anywhere anywhere [goto] /* cali:jyqX4XVvHg-JsYO7 */
0 0 cali-set-endpoint-mark-d all -- calid+ any anywhere anywhere [goto] /* cali:jlopMnuak5xLaijR */
0 0 cali-set-endpoint-mark-e all -- calie+ any anywhere anywhere [goto] /* cali:h45uZcHU7nQcPKDk */
0 0 cali-set-endpoint-mark-f all -- calif+ any anywhere anywhere [goto] /* cali:i8JJB-A5ZjU9lnEV */
0 0 cali-set-endpoint-mark-a all -- a+ any anywhere anywhere [goto] /* cali:4fwZeSb5ONpkFyhT */
0 0 cali-sm-cdummy0 all -- cdummy0 any anywhere anywhere [goto] /* cali:e_yNqJ458Cr9cjcq */
0 0 DROP all -- cali+ any anywhere anywhere /* cali:14t8_jdkpT0DZjfO */ /* Unknown endpoint */
10 746 MARK all -- any any anywhere anywhere /* cali:uGb_45CZTiMUeyQJ */ /* Non-Cali endpoint mark */ MARK xset 0x200000/0xffe00000
Chain cali-set-endpoint-mark-0 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali01ca0d88e23 all -- cali01ca0d88e23 any anywhere anywhere [goto] /* cali:HHhnUmUrPyhHlQ1u */
0 0 cali-sm-cali01e885824be all -- cali01e885824be any anywhere anywhere [goto] /* cali:uf7aeZbtqfbD6Zh4 */
0 0 cali-sm-cali049f31cdaa2 all -- cali049f31cdaa2 any anywhere anywhere [goto] /* cali:7NmNbg95MwfEDeJf */
0 0 cali-sm-cali0576c91a912 all -- cali0576c91a912 any anywhere anywhere [goto] /* cali:D8toIZ9xy0ybM8X4 */
0 0 cali-sm-cali06114a20c1e all -- cali06114a20c1e any anywhere anywhere [goto] /* cali:ujYLhzb8WXQOmL6G */
0 0 cali-sm-cali06aac5ed2e0 all -- cali06aac5ed2e0 any anywhere anywhere [goto] /* cali:Oa0_PdWz4x1tHQEa */
Chain cali-set-endpoint-mark-1 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali11a5a48ff09 all -- cali11a5a48ff09 any anywhere anywhere [goto] /* cali:6d6dOzov0CGIi1Zz */
0 0 cali-sm-cali12e0df46963 all -- cali12e0df46963 any anywhere anywhere [goto] /* cali:31BucNqY77Y-ImkO */
0 0 cali-sm-cali13f46d88cc9 all -- cali13f46d88cc9 any anywhere anywhere [goto] /* cali:eAF5H4EJCOr6u21E */
0 0 cali-sm-cali145de1560bc all -- cali145de1560bc any anywhere anywhere [goto] /* cali:B7kPBVNJmiSUGxfT */
0 0 cali-sm-cali16870f08964 all -- cali16870f08964 any anywhere anywhere [goto] /* cali:6C_6VS0TypS5PSgU */
0 0 cali-sm-cali193f7d98be3 all -- cali193f7d98be3 any anywhere anywhere [goto] /* cali:sqXajC1ekFlzCdW7 */
0 0 cali-sm-cali1a3c10d6230 all -- cali1a3c10d6230 any anywhere anywhere [goto] /* cali:sxR2SXFiF20-QF_m */
0 0 cali-sm-cali1a421c33dfc all -- cali1a421c33dfc any anywhere anywhere [goto] /* cali:gh_yXn5wytrfEq4q */
Chain cali-set-endpoint-mark-2 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali22e016245eb all -- cali22e016245eb any anywhere anywhere [goto] /* cali:AFm8OHw_kFOeoIWN */
0 0 cali-sm-cali2ea845f9301 all -- cali2ea845f9301 any anywhere anywhere [goto] /* cali:iIAARh5sESjodyba */
Chain cali-set-endpoint-mark-3 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali34bca5edd1b all -- cali34bca5edd1b any anywhere anywhere [goto] /* cali:aiKbUgwy2iWY5YxK */
0 0 cali-sm-cali3dd65087074 all -- cali3dd65087074 any anywhere anywhere [goto] /* cali:8scd8EsT_GldcQbo */
Chain cali-set-endpoint-mark-4 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali4272878fdab all -- cali4272878fdab any anywhere anywhere [goto] /* cali:WaR9gHJ0h1IwaxSJ */
0 0 cali-sm-cali467b6a1f983 all -- cali467b6a1f983 any anywhere anywhere [goto] /* cali:OAjsAMz5HtO5i3VE */
Chain cali-set-endpoint-mark-5 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali502fc901a2f all -- cali502fc901a2f any anywhere anywhere [goto] /* cali:n7Bwj1E77yRpiz0Z */
0 0 cali-sm-cali5374357b2dd all -- cali5374357b2dd any anywhere anywhere [goto] /* cali:UpvVT8qwee77roE2 */
0 0 cali-sm-cali57581718244 all -- cali57581718244 any anywhere anywhere [goto] /* cali:_2UPjDMF0cYXtuLy */
0 0 cali-sm-cali5ed4c1e9a39 all -- cali5ed4c1e9a39 any anywhere anywhere [goto] /* cali:HGzIRo8G5qjQKUqO */
Chain cali-set-endpoint-mark-6 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali609774fb6ac all -- cali609774fb6ac any anywhere anywhere [goto] /* cali:qArnK2wxbUsqli-X */
0 0 cali-sm-cali6099c4a8778 all -- cali6099c4a8778 any anywhere anywhere [goto] /* cali:MYuavHsmsFy64foR */
0 0 cali-sm-cali669be974601 all -- cali669be974601 any anywhere anywhere [goto] /* cali:EEXdnrh8fCcqtDhY */
0 0 cali-sm-cali6c3741a667a all -- cali6c3741a667a any anywhere anywhere [goto] /* cali:F6puh4RK-Eqof6gD */
0 0 cali-sm-cali6d815386f40 all -- cali6d815386f40 any anywhere anywhere [goto] /* cali:igDLQ1zs8fYwz5ce */
0 0 cali-sm-cali6e9e9baed01 all -- cali6e9e9baed01 any anywhere anywhere [goto] /* cali:KY0t76jO9JHcXEvm */
Chain cali-set-endpoint-mark-7 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali701e7cc6c80 all -- cali701e7cc6c80 any anywhere anywhere [goto] /* cali:29oVXkydzhxoTdhc */
0 0 cali-sm-cali736792029c9 all -- cali736792029c9 any anywhere anywhere [goto] /* cali:gV2ifKVRWzrm_g66 */
0 0 cali-sm-cali741adbc0280 all -- cali741adbc0280 any anywhere anywhere [goto] /* cali:ZI-dIeN3fg6e86BE */
0 0 cali-sm-cali7b7a4c8576a all -- cali7b7a4c8576a any anywhere anywhere [goto] /* cali:hb_Itoml2k-TlMUh */
Chain cali-set-endpoint-mark-8 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali81ba87c5c60 all -- cali81ba87c5c60 any anywhere anywhere [goto] /* cali:rElMrGocEfN6VV5Z */
0 0 cali-sm-cali82b79fb83c5 all -- cali82b79fb83c5 any anywhere anywhere [goto] /* cali:VFj8gOZk5FNMhiu6 */
0 0 cali-sm-cali83c474a3c81 all -- cali83c474a3c81 any anywhere anywhere [goto] /* cali:gVcoCq3z5M5-8HB6 */
0 0 cali-sm-cali8706671fffc all -- cali8706671fffc any anywhere anywhere [goto] /* cali:ctAJ2eo1UR2kIQW- */
0 0 cali-sm-cali8d4a964a1b2 all -- cali8d4a964a1b2 any anywhere anywhere [goto] /* cali:CRY7FHInjfhvboSL */
Chain cali-set-endpoint-mark-9 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-cali91725ef2e87 all -- cali91725ef2e87 any anywhere anywhere [goto] /* cali:j3pWPSwsToMkK9Ww */
0 0 cali-sm-cali9633dc47c02 all -- cali9633dc47c02 any anywhere anywhere [goto] /* cali:u_J9FscL5CsgVNWf */
0 0 cali-sm-cali9986e181eac all -- cali9986e181eac any anywhere anywhere [goto] /* cali:F5ia3SH7b6UmnYaV */
0 0 cali-sm-cali99c2052d800 all -- cali99c2052d800 any anywhere anywhere [goto] /* cali:go8JTWY9IuiaXonC */
0 0 cali-sm-cali9c22f997550 all -- cali9c22f997550 any anywhere anywhere [goto] /* cali:p9jkcsM2g6TAShIb */
0 0 cali-sm-cali9c9451f75ea all -- cali9c9451f75ea any anywhere anywhere [goto] /* cali:7ELDJ2WELD17wsAr */
Chain cali-set-endpoint-mark-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-adummy0 all -- adummy0 any anywhere anywhere [goto] /* cali:B4z27dbzhbTeB7aD */
0 0 cali-sm-adummy1 all -- adummy1 any anywhere anywhere [goto] /* cali:ydTULeucDSDCSJYu */
Chain cali-set-endpoint-mark-b (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-calib19e4206d8c all -- calib19e4206d8c any anywhere anywhere [goto] /* cali:Jsx2P87dtkqzq6Lb */
0 0 cali-sm-calib4366e6156c all -- calib4366e6156c any anywhere anywhere [goto] /* cali:FDrS04BQdXTPhz3u */
0 0 cali-sm-calibbfcc132cfe all -- calibbfcc132cfe any anywhere anywhere [goto] /* cali:ZBqSdvmxUWapwQd5 */
Chain cali-set-endpoint-mark-d (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-calid1d7cde9caf all -- calid1d7cde9caf any anywhere anywhere [goto] /* cali:xAU0qEZKt57zS1kW */
0 0 cali-sm-calid41ffc7ab4f all -- calid41ffc7ab4f any anywhere anywhere [goto] /* cali:2XnjSuNC7PzJWixw */
Chain cali-set-endpoint-mark-e (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-calie02f19b12c9 all -- calie02f19b12c9 any anywhere anywhere [goto] /* cali:KdTD1R-JbziXgOU_ */
0 0 cali-sm-calie0317e52f89 all -- calie0317e52f89 any anywhere anywhere [goto] /* cali:CuhN8xB-KcOP_gTd */
0 0 cali-sm-calie1470bf4a1a all -- calie1470bf4a1a any anywhere anywhere [goto] /* cali:uIRN5K7pBSNBEQb9 */
0 0 cali-sm-calie33122e4c45 all -- calie33122e4c45 any anywhere anywhere [goto] /* cali:l-wKbaPCxaVoJ61r */
0 0 cali-sm-calie6cedf7bf9e all -- calie6cedf7bf9e any anywhere anywhere [goto] /* cali:MogFXrhkFLGCGu30 */
Chain cali-set-endpoint-mark-f (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-sm-calif9c0036887f all -- calif9c0036887f any anywhere anywhere [goto] /* cali:ySOni7jfxzdrxDMV */
0 0 cali-sm-califa6bc0a3251 all -- califa6bc0a3251 any anywhere anywhere [goto] /* cali:C33cQAbxruL9nRVT */
Chain cali-sm-adummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:H_z1EA9Itf4bWolc */ MARK xset 0xb9400000/0xffe00000
Chain cali-sm-adummy1 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:XC4n0CkYgvUgzsBN */ MARK xset 0xb9600000/0xffe00000
Chain cali-sm-cali01ca0d88e23 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:sZ8FF9L6p_hrv7XP */ MARK xset 0x8ee00000/0xffe00000
Chain cali-sm-cali01e885824be (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:ASchY2A9P_egXUvp */ MARK xset 0x93800000/0xffe00000
Chain cali-sm-cali049f31cdaa2 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:RlaXf1G-DgNUQZVh */ MARK xset 0x4f000000/0xffe00000
Chain cali-sm-cali0576c91a912 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:kuSVeVBAkT4f7XkU */ MARK xset 0xa7000000/0xffe00000
Chain cali-sm-cali06114a20c1e (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:Q_QUsBidcQHoWcBH */ MARK xset 0x4d800000/0xffe00000
Chain cali-sm-cali06aac5ed2e0 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:HoEAg0DDcZ8Opkpp */ MARK xset 0xb000000/0xffe00000
Chain cali-sm-cali11a5a48ff09 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:bb4cfxCY505vjx0Q */ MARK xset 0x54800000/0xffe00000
Chain cali-sm-cali12e0df46963 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:vdZVjkh4Cs39r33a */ MARK xset 0x69400000/0xffe00000
Chain cali-sm-cali13f46d88cc9 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:xDHAOew-yU92BkDO */ MARK xset 0x6de00000/0xffe00000
Chain cali-sm-cali145de1560bc (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:_HJh7_EXb0M4pR9Y */ MARK xset 0x46800000/0xffe00000
Chain cali-sm-cali16870f08964 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:kO7zUl-Bneg6CS6E */ MARK xset 0xfce00000/0xffe00000
Chain cali-sm-cali193f7d98be3 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:TQg26lFmQy9ip1xc */ MARK xset 0xace00000/0xffe00000
Chain cali-sm-cali1a3c10d6230 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:yWdxG5imnkB6Kt_Z */ MARK xset 0x8e800000/0xffe00000
Chain cali-sm-cali1a421c33dfc (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:pohoca0lNehkRUHe */ MARK xset 0xf0e00000/0xffe00000
Chain cali-sm-cali22e016245eb (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:CGLCSd-mzM6jRVEn */ MARK xset 0x33000000/0xffe00000
Chain cali-sm-cali2ea845f9301 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:fstNtye7NV19Rgao */ MARK xset 0xee000000/0xffe00000
Chain cali-sm-cali34bca5edd1b (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:QcboCR7LAb-dGE7N */ MARK xset 0xa400000/0xffe00000
Chain cali-sm-cali3dd65087074 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:2QlfcWwEROMHgqzc */ MARK xset 0x2d800000/0xffe00000
Chain cali-sm-cali4272878fdab (1 references)
pkts bytes target prot opt in out source destination
1 60 MARK all -- any any anywhere anywhere /* cali:NGa9UJGy05xgsPc8 */ MARK xset 0xe2200000/0xffe00000
Chain cali-sm-cali467b6a1f983 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:iKlSlfr4utdqQJk9 */ MARK xset 0xd9e00000/0xffe00000
Chain cali-sm-cali502fc901a2f (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:h6hxoH1k9L9Ogee9 */ MARK xset 0xcee00000/0xffe00000
Chain cali-sm-cali5374357b2dd (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:ejK_q9jX8qStJBav */ MARK xset 0xe7000000/0xffe00000
Chain cali-sm-cali57581718244 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:bqaCSxja2kEBDvOj */ MARK xset 0xe0400000/0xffe00000
Chain cali-sm-cali5ed4c1e9a39 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:Kd4hl5p98yppjeVu */ MARK xset 0xf9a00000/0xffe00000
Chain cali-sm-cali609774fb6ac (1 references)
pkts bytes target prot opt in out source destination
3 180 MARK all -- any any anywhere anywhere /* cali:bJjoDdRDDjnMASLG */ MARK xset 0x36e00000/0xffe00000
Chain cali-sm-cali6099c4a8778 (1 references)
pkts bytes target prot opt in out source destination
3 180 MARK all -- any any anywhere anywhere /* cali:82x_dEPLEoT20B_p */ MARK xset 0x1a000000/0xffe00000
Chain cali-sm-cali669be974601 (1 references)
pkts bytes target prot opt in out source destination
1 60 MARK all -- any any anywhere anywhere /* cali:rwV03TK4R5Oe567f */ MARK xset 0x65200000/0xffe00000
Chain cali-sm-cali6c3741a667a (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:6JZzAEOuCVhejYUb */ MARK xset 0x9be00000/0xffe00000
Chain cali-sm-cali6d815386f40 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:hKxNkVwT-bZHonEC */ MARK xset 0x48a00000/0xffe00000
Chain cali-sm-cali6e9e9baed01 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:GFpPOOnhkiT5e5QG */ MARK xset 0x51600000/0xffe00000
Chain cali-sm-cali701e7cc6c80 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:ajKFlofQe91cAmVX */ MARK xset 0x7a00000/0xffe00000
Chain cali-sm-cali736792029c9 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:tbQkVlexUrIg27Pb */ MARK xset 0xa3200000/0xffe00000
Chain cali-sm-cali741adbc0280 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:kEe1bu1lYCSRICGn */ MARK xset 0xbf400000/0xffe00000
Chain cali-sm-cali7b7a4c8576a (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:QHPZSBKitlYKPeqF */ MARK xset 0x24600000/0xffe00000
Chain cali-sm-cali81ba87c5c60 (1 references)
pkts bytes target prot opt in out source destination
1 60 MARK all -- any any anywhere anywhere /* cali:V0a-6DPh592NmUoy */ MARK xset 0xd4400000/0xffe00000
Chain cali-sm-cali82b79fb83c5 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:7A3OMMHbGTxjVtxl */ MARK xset 0x8c600000/0xffe00000
Chain cali-sm-cali83c474a3c81 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:BhnomQiBEFABPKq7 */ MARK xset 0xcae00000/0xffe00000
Chain cali-sm-cali8706671fffc (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:vDp_yylFR2N66VSa */ MARK xset 0x13800000/0xffe00000
Chain cali-sm-cali8d4a964a1b2 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:VPMReICjQU65mv43 */ MARK xset 0x9d400000/0xffe00000
Chain cali-sm-cali91725ef2e87 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:gdqC3gYZDLatyk9l */ MARK xset 0x5e600000/0xffe00000
Chain cali-sm-cali9633dc47c02 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:ifKpE-nAtdLHeJAm */ MARK xset 0x55000000/0xffe00000
Chain cali-sm-cali9986e181eac (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:5j46u25J_Xpm1GfD */ MARK xset 0x26800000/0xffe00000
Chain cali-sm-cali99c2052d800 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:wQn6L8mVjZLm_GNy */ MARK xset 0x17c00000/0xffe00000
Chain cali-sm-cali9c22f997550 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:aRgUW5GVQKzVgKyr */ MARK xset 0x91600000/0xffe00000
Chain cali-sm-cali9c9451f75ea (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:D76oAeNVQqimFWjx */ MARK xset 0x6ce00000/0xffe00000
Chain cali-sm-caliac90068d900 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:XZofbXT7y6fvbWLW */ MARK xset 0xbb400000/0xffe00000
Chain cali-sm-calib19e4206d8c (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:qVjTN020m7DtdBOY */ MARK xset 0xd1800000/0xffe00000
Chain cali-sm-calib4366e6156c (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:gSRBvxJUKInkHmmk */ MARK xset 0xcfe00000/0xffe00000
Chain cali-sm-calibbfcc132cfe (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:eO32aPVjBuN19xXV */ MARK xset 0x78400000/0xffe00000
Chain cali-sm-calic2b72c3abdd (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:qjNQEl5aax_WyUjK */ MARK xset 0xdae00000/0xffe00000
Chain cali-sm-calid1d7cde9caf (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:JGFe0FiZVpGPXDCM */ MARK xset 0x20a00000/0xffe00000
Chain cali-sm-calid41ffc7ab4f (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:WRYvjfBE0c93lPb_ */ MARK xset 0xc5800000/0xffe00000
Chain cali-sm-calie02f19b12c9 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:LsZ5tBmS7GOasPW- */ MARK xset 0x8f800000/0xffe00000
Chain cali-sm-calie0317e52f89 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:JNyp2313ML4URFnE */ MARK xset 0x4c200000/0xffe00000
Chain cali-sm-calie1470bf4a1a (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:MQWX0ZAeLD4SOVOk */ MARK xset 0xf000000/0xffe00000
Chain cali-sm-calie33122e4c45 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:ny4lZwMGCSwn4ARW */ MARK xset 0xe3600000/0xffe00000
Chain cali-sm-calie6cedf7bf9e (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:tCZxRRcHL4N0b_uf */ MARK xset 0x13000000/0xffe00000
Chain cali-sm-calif9c0036887f (1 references)
pkts bytes target prot opt in out source destination
1 60 MARK all -- any any anywhere anywhere /* cali:ZCSoJXGDr33i-Hi_ */ MARK xset 0xcf400000/0xffe00000
Chain cali-sm-califa6bc0a3251 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:rVQ5O6tSeWMn6GWS */ MARK xset 0xb6c00000/0xffe00000
Chain cali-sm-cdummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 MARK all -- any any anywhere anywhere /* cali:NeY-9FgoJU0L-NSi */ MARK xset 0xb3000000/0xffe00000
Chain cali-th-adummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:RemHtnnkZ_tP2qZY */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:zgJEJky8gJTqeBQA */ ctstate INVALID
0 0 cali-failsafe-out all -- any any anywhere anywhere /* cali:f-HvcdIzxOG-Prhi */
0 0 MARK all -- any any anywhere anywhere /* cali:m3qtxNI_rHZoPMty */ MARK and 0xfffcffff
0 0 NFLOG all -- any any anywhere anywhere /* cali:xMhmLJZ8cNmTXOoS */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:DU_2In9nVZqlFPEi */ /* Drop if no profiles matched */
Chain cali-th-adummy1 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:OhTtyfaSwf8dTaed */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Qtm2p1hC-6WwfAef */ ctstate INVALID
0 0 cali-failsafe-out all -- any any anywhere anywhere /* cali:USMrIQ3egVqQGryS */
0 0 MARK all -- any any anywhere anywhere /* cali:lZsuiSyg6uI-RXfq */ MARK and 0xfffcffff
0 0 NFLOG all -- any any anywhere anywhere /* cali:1HoVyNN5mhNKUjZy */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:XIs-WtDqb7cCxKa- */ /* Drop if no profiles matched */
Chain cali-th-cdummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:QzuEEDWY8Xiwvb9X */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:FZp1E-PdvWgtc9JW */ ctstate INVALID
0 0 cali-failsafe-out all -- any any anywhere anywhere /* cali:kh35v4JAbgMg7Xgi */
0 0 MARK all -- any any anywhere anywhere /* cali:E8saFumIo_iUGFfl */ MARK and 0xfffcffff
0 0 NFLOG all -- any any anywhere anywhere /* cali:KTZOZXYkicZyHU8S */ nflog-prefix DRE nflog-group 2 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:3c_gOOcBsA7rB7nj */ /* Drop if no profiles matched */
Chain cali-thfw-adummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:8wFrhXdE-GqEdKFr */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:1MMbujNjZybv5wGx */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:8R8NCbMvZsFLmyHo */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:_xsgjMnUZANCY6ah */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:_PhC01ND8LoeTtGm */ /* Return for accepted forward traffic */
Chain cali-thfw-adummy1 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:_2I8OrJC1BCwQ0Wz */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:kH3btOyc9CZzYkBM */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:-rHOAJsGvASgVB75 */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:Pjp7Iw8wL3C3yfRm */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:aM-L8Pi-hpVqBolw */ /* Return for accepted forward traffic */
Chain cali-thfw-cdummy0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:1iyFU6O7KbqxqSD1 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:dhDIhxXRKVd8GHVi */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Gr9ZlcO-xpLvPzoC */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:QqENUUih4WSD80mv */ /* Allow forwarded traffic by default */ MARK or 0x10000
0 0 RETURN all -- any any anywhere anywhere /* cali:D1TDrzA526n8sWfw */ /* Return for accepted forward traffic */
Chain cali-to-hep-forward (2 references)
pkts bytes target prot opt in out source destination
0 0 cali-to-hep-forward-a all -- any a+ anywhere anywhere [goto] /* cali:DKrAUS8l8HpevH4J */
0 0 cali-thfw-cdummy0 all -- any cdummy0 anywhere anywhere [goto] /* cali:bmN8eojlwyC4fItt */
Chain cali-to-hep-forward-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-thfw-adummy0 all -- any adummy0 anywhere anywhere [goto] /* cali:PnfetEoWMPbI1Rj2 */
0 0 cali-thfw-adummy1 all -- any adummy1 anywhere anywhere [goto] /* cali:DEdw_D4Z95SdaAnb */
Chain cali-to-host-endpoint (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-to-host-endpoint-a all -- any a+ anywhere anywhere [goto] /* cali:syrsgbqRYMNcv4dN */
0 0 cali-th-cdummy0 all -- any cdummy0 anywhere anywhere [goto] /* cali:8j8l9MOJQpFaRP5T */
Chain cali-to-host-endpoint-a (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-th-adummy0 all -- any adummy0 anywhere anywhere [goto] /* cali:oBrv0idDiKmtIIpS */
0 0 cali-th-adummy1 all -- any adummy1 anywhere anywhere [goto] /* cali:XteHMO8qVnridlMi */
Chain cali-to-wl-dispatch (2 references)
pkts bytes target prot opt in out source destination
0 0 cali-to-wl-dispatch-0 all -- any cali0+ anywhere anywhere [goto] /* cali:dIkHjFD9PelLx7cm */
0 0 cali-to-wl-dispatch-1 all -- any cali1+ anywhere anywhere [goto] /* cali:cOtVr_jX21sbMubK */
0 0 cali-to-wl-dispatch-2 all -- any cali2+ anywhere anywhere [goto] /* cali:DzxtnY8HbTKkqBjq */
0 0 cali-to-wl-dispatch-3 all -- any cali3+ anywhere anywhere [goto] /* cali:6wt_eRgXjjBP9wBe */
0 0 cali-to-wl-dispatch-4 all -- any cali4+ anywhere anywhere [goto] /* cali:73LGgIpG-tOryEB0 */
0 0 cali-to-wl-dispatch-5 all -- any cali5+ anywhere anywhere [goto] /* cali:kQQ-CiiPsiZYEsNO */
0 0 cali-to-wl-dispatch-6 all -- any cali6+ anywhere anywhere [goto] /* cali:LSwCz3VfTxilxvEE */
0 0 cali-to-wl-dispatch-7 all -- any cali7+ anywhere anywhere [goto] /* cali:bTcXYhLNI-sThV3z */
0 0 cali-to-wl-dispatch-8 all -- any cali8+ anywhere anywhere [goto] /* cali:-MkByBoaPALpm-V6 */
0 0 cali-to-wl-dispatch-9 all -- any cali9+ anywhere anywhere [goto] /* cali:dQuEV1Vjxgak5rNY */
0 0 cali-tw-caliac90068d900 all -- any caliac90068d900 anywhere anywhere [goto] /* cali:kz9ZBxclfKEpLSy5 */
0 0 cali-to-wl-dispatch-b all -- any calib+ anywhere anywhere [goto] /* cali:kfIlUETUZMn-Rlx2 */
0 0 cali-tw-calic2b72c3abdd all -- any calic2b72c3abdd anywhere anywhere [goto] /* cali:rn-f-mSKhe6tc-sD */
0 0 cali-to-wl-dispatch-d all -- any calid+ anywhere anywhere [goto] /* cali:D3Yf2STLMUBl80xX */
0 0 cali-to-wl-dispatch-e all -- any calie+ anywhere anywhere [goto] /* cali:-r3wGPl9wt-Ea9yt */
0 0 cali-to-wl-dispatch-f all -- any calif+ anywhere anywhere [goto] /* cali:aYvQYZ95NuoAs8W3 */
0 0 DROP all -- any any anywhere anywhere /* cali:JBjXuT7o4UApREc2 */ /* Unknown interface */
Chain cali-to-wl-dispatch-0 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali01ca0d88e23 all -- any cali01ca0d88e23 anywhere anywhere [goto] /* cali:6QrjmQbB1Ybcgv-- */
0 0 cali-tw-cali01e885824be all -- any cali01e885824be anywhere anywhere [goto] /* cali:YM1xjfDQRe6OMxrM */
0 0 cali-tw-cali049f31cdaa2 all -- any cali049f31cdaa2 anywhere anywhere [goto] /* cali:C2nWYbv-vmt64KXk */
0 0 cali-tw-cali0576c91a912 all -- any cali0576c91a912 anywhere anywhere [goto] /* cali:_6InaCR9vVytLGhd */
0 0 cali-tw-cali06114a20c1e all -- any cali06114a20c1e anywhere anywhere [goto] /* cali:jidgSPogHhRMUMFP */
0 0 cali-tw-cali06aac5ed2e0 all -- any cali06aac5ed2e0 anywhere anywhere [goto] /* cali:dONW6EiufEd15gVM */
0 0 DROP all -- any any anywhere anywhere /* cali:hNOol_bhxZi5nxjf */ /* Unknown interface */
Chain cali-to-wl-dispatch-1 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali11a5a48ff09 all -- any cali11a5a48ff09 anywhere anywhere [goto] /* cali:17BKauIw477-WOXs */
0 0 cali-tw-cali12e0df46963 all -- any cali12e0df46963 anywhere anywhere [goto] /* cali:asAQmossSFUvXIk9 */
0 0 cali-tw-cali13f46d88cc9 all -- any cali13f46d88cc9 anywhere anywhere [goto] /* cali:m9LkpkxwHTwgo8Vh */
0 0 cali-tw-cali145de1560bc all -- any cali145de1560bc anywhere anywhere [goto] /* cali:ZLzS6M8qhruGfvgL */
0 0 cali-tw-cali16870f08964 all -- any cali16870f08964 anywhere anywhere [goto] /* cali:ZwXSCZgccRHbN5IL */
0 0 cali-tw-cali193f7d98be3 all -- any cali193f7d98be3 anywhere anywhere [goto] /* cali:-URAfPs9Mad34ira */
0 0 cali-tw-cali1a3c10d6230 all -- any cali1a3c10d6230 anywhere anywhere [goto] /* cali:dnB3j-oIFBsTxbLr */
0 0 cali-tw-cali1a421c33dfc all -- any cali1a421c33dfc anywhere anywhere [goto] /* cali:zLIIPOE_LOBakeB6 */
0 0 DROP all -- any any anywhere anywhere /* cali:wilqyjbLFy2ULq8u */ /* Unknown interface */
Chain cali-to-wl-dispatch-2 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali22e016245eb all -- any cali22e016245eb anywhere anywhere [goto] /* cali:8BD0JEkcBDZ85iGO */
0 0 cali-tw-cali2ea845f9301 all -- any cali2ea845f9301 anywhere anywhere [goto] /* cali:oSeigIaEM002RYYw */
0 0 DROP all -- any any anywhere anywhere /* cali:ce7R6g8ybBfAl576 */ /* Unknown interface */
Chain cali-to-wl-dispatch-3 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali34bca5edd1b all -- any cali34bca5edd1b anywhere anywhere [goto] /* cali:si3fjuu3wfNyaGnc */
0 0 cali-tw-cali3dd65087074 all -- any cali3dd65087074 anywhere anywhere [goto] /* cali:mTivDXqFR23ZISMC */
0 0 DROP all -- any any anywhere anywhere /* cali:nZS6DG6URnLslKNa */ /* Unknown interface */
Chain cali-to-wl-dispatch-4 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali4272878fdab all -- any cali4272878fdab anywhere anywhere [goto] /* cali:4mz0PVGEtx8IkK6w */
0 0 cali-tw-cali467b6a1f983 all -- any cali467b6a1f983 anywhere anywhere [goto] /* cali:Z3ghUQw_Q47eSbhH */
0 0 DROP all -- any any anywhere anywhere /* cali:DNPM81e89wo1wNsy */ /* Unknown interface */
Chain cali-to-wl-dispatch-5 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali502fc901a2f all -- any cali502fc901a2f anywhere anywhere [goto] /* cali:GM9JuqRFj-L5bOSV */
0 0 cali-tw-cali5374357b2dd all -- any cali5374357b2dd anywhere anywhere [goto] /* cali:ifeosVt1Yh-E28OZ */
0 0 cali-tw-cali57581718244 all -- any cali57581718244 anywhere anywhere [goto] /* cali:mOPzoyPc_7pzaU3Y */
0 0 cali-tw-cali5ed4c1e9a39 all -- any cali5ed4c1e9a39 anywhere anywhere [goto] /* cali:rdQd7kZdFbu-NN66 */
0 0 DROP all -- any any anywhere anywhere /* cali:gb5sVaRKtS82QUhF */ /* Unknown interface */
Chain cali-to-wl-dispatch-6 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali609774fb6ac all -- any cali609774fb6ac anywhere anywhere [goto] /* cali:KO1d5iFTnsNqXXEJ */
0 0 cali-tw-cali6099c4a8778 all -- any cali6099c4a8778 anywhere anywhere [goto] /* cali:iR_roLWQFLrMTXwu */
0 0 cali-tw-cali669be974601 all -- any cali669be974601 anywhere anywhere [goto] /* cali:EpOBbbIwYff5eIX1 */
0 0 cali-tw-cali6c3741a667a all -- any cali6c3741a667a anywhere anywhere [goto] /* cali:2-DpV1qNfWwjzJCh */
0 0 cali-tw-cali6d815386f40 all -- any cali6d815386f40 anywhere anywhere [goto] /* cali:M-qwkHT7HqFFhPCt */
0 0 cali-tw-cali6e9e9baed01 all -- any cali6e9e9baed01 anywhere anywhere [goto] /* cali:HA8GaWBPWSR_MXUJ */
0 0 DROP all -- any any anywhere anywhere /* cali:ftyJJ4slhc0VOMdq */ /* Unknown interface */
Chain cali-to-wl-dispatch-7 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali701e7cc6c80 all -- any cali701e7cc6c80 anywhere anywhere [goto] /* cali:DID_kXdOz2kIqhfp */
0 0 cali-tw-cali736792029c9 all -- any cali736792029c9 anywhere anywhere [goto] /* cali:OEg3Vr-eC82rt1ra */
0 0 cali-tw-cali741adbc0280 all -- any cali741adbc0280 anywhere anywhere [goto] /* cali:PBenVk0s0MHu5238 */
0 0 cali-tw-cali7b7a4c8576a all -- any cali7b7a4c8576a anywhere anywhere [goto] /* cali:gv-glN063yzq0c0u */
0 0 DROP all -- any any anywhere anywhere /* cali:ur8GbtQAaMtn58J0 */ /* Unknown interface */
Chain cali-to-wl-dispatch-8 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali81ba87c5c60 all -- any cali81ba87c5c60 anywhere anywhere [goto] /* cali:Kd08UglnULIuBWOa */
0 0 cali-tw-cali82b79fb83c5 all -- any cali82b79fb83c5 anywhere anywhere [goto] /* cali:QeHiAO9tuE06S_ZF */
0 0 cali-tw-cali83c474a3c81 all -- any cali83c474a3c81 anywhere anywhere [goto] /* cali:tJxHpfSFaQI9VSYt */
0 0 cali-tw-cali8706671fffc all -- any cali8706671fffc anywhere anywhere [goto] /* cali:4jVyKO-2NF9b84Lx */
0 0 cali-tw-cali8d4a964a1b2 all -- any cali8d4a964a1b2 anywhere anywhere [goto] /* cali:63BQ1PmGb7TORUNP */
0 0 DROP all -- any any anywhere anywhere /* cali:l2JLZq4qPOsYL_GG */ /* Unknown interface */
Chain cali-to-wl-dispatch-9 (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-cali91725ef2e87 all -- any cali91725ef2e87 anywhere anywhere [goto] /* cali:GrWXZDMGmjY_A-lm */
0 0 cali-tw-cali9633dc47c02 all -- any cali9633dc47c02 anywhere anywhere [goto] /* cali:pbVgl2bfJKWR_bJR */
0 0 cali-tw-cali9986e181eac all -- any cali9986e181eac anywhere anywhere [goto] /* cali:idHOxHlDNT_qAIM_ */
0 0 cali-tw-cali99c2052d800 all -- any cali99c2052d800 anywhere anywhere [goto] /* cali:ygKhT3LnG6SDBJUL */
0 0 cali-tw-cali9c22f997550 all -- any cali9c22f997550 anywhere anywhere [goto] /* cali:MRLC03R_F8mt_kLe */
0 0 cali-tw-cali9c9451f75ea all -- any cali9c9451f75ea anywhere anywhere [goto] /* cali:nPVXZRYZqJ6o30Vl */
0 0 DROP all -- any any anywhere anywhere /* cali:pvc_IkY-Ygn3QGi3 */ /* Unknown interface */
Chain cali-to-wl-dispatch-b (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-calib19e4206d8c all -- any calib19e4206d8c anywhere anywhere [goto] /* cali:FP24zvhigjm9el6K */
0 0 cali-tw-calib4366e6156c all -- any calib4366e6156c anywhere anywhere [goto] /* cali:CxNVGlGXHrZhM1fl */
0 0 cali-tw-calibbfcc132cfe all -- any calibbfcc132cfe anywhere anywhere [goto] /* cali:lYWJdIpTLOTicoo9 */
0 0 DROP all -- any any anywhere anywhere /* cali:Uw7wVDKod38gbx0e */ /* Unknown interface */
Chain cali-to-wl-dispatch-d (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-calid1d7cde9caf all -- any calid1d7cde9caf anywhere anywhere [goto] /* cali:_CPPPA8ExMTVvKGO */
0 0 cali-tw-calid41ffc7ab4f all -- any calid41ffc7ab4f anywhere anywhere [goto] /* cali:minWB0wyojx8UNVU */
0 0 DROP all -- any any anywhere anywhere /* cali:QZPoaRNgI-WWNWW_ */ /* Unknown interface */
Chain cali-to-wl-dispatch-e (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-calie02f19b12c9 all -- any calie02f19b12c9 anywhere anywhere [goto] /* cali:e2TtE6r_ui1C_PGw */
0 0 cali-tw-calie0317e52f89 all -- any calie0317e52f89 anywhere anywhere [goto] /* cali:fD5mpQbvURUpJsOf */
0 0 cali-tw-calie1470bf4a1a all -- any calie1470bf4a1a anywhere anywhere [goto] /* cali:ImJzHo2Lhd9nZyhy */
0 0 cali-tw-calie33122e4c45 all -- any calie33122e4c45 anywhere anywhere [goto] /* cali:7WkVQSw8rIP3kJQy */
0 0 cali-tw-calie6cedf7bf9e all -- any calie6cedf7bf9e anywhere anywhere [goto] /* cali:MwdrNIr71D222Wb7 */
0 0 DROP all -- any any anywhere anywhere /* cali:Lvw_yb91ZnuconNa */ /* Unknown interface */
Chain cali-to-wl-dispatch-f (1 references)
pkts bytes target prot opt in out source destination
0 0 cali-tw-calif9c0036887f all -- any calif9c0036887f anywhere anywhere [goto] /* cali:TA3rAG9Ly7VOfPPp */
0 0 cali-tw-califa6bc0a3251 all -- any califa6bc0a3251 anywhere anywhere [goto] /* cali:8zZdxAQbElI6gktB */
0 0 DROP all -- any any anywhere anywhere /* cali:sYRbM7V3sQTFO1Cs */ /* Unknown interface */
Chain cali-tw-cali01ca0d88e23 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:whftzy6bbMqLMKIm */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:ZKwC9FdYCYnwk1-y */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:DHwmCl-5TwVoCFnn */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:rTmavaRBp0DbpLJF */
0 0 RETURN all -- any any anywhere anywhere /* cali:sM0pL8sUbya959l8 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:LRnrpd01vuuDuzF9 */
0 0 RETURN all -- any any anywhere anywhere /* cali:nYiJ9od3TQqGLEJt */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:3feUJSexCQGLD-5q */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:ronou7XIkPCgi8lR */ /* Drop if no profiles matched */
Chain cali-tw-cali01e885824be (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:QsLKXy3ze3pF1Ij9 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:hnRd2pwFGV-7uHTR */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:qdhhTIzsXxFP2qnl */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:OiTx6Y37ciZ4ILVz */
0 0 RETURN all -- any any anywhere anywhere /* cali:srMhQr4t9cLGbcv3 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:YZLj7qEbuY3QKIQH */
0 0 RETURN all -- any any anywhere anywhere /* cali:mEnD8THyZ7V-oBpk */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:vEfrdYbzEUTxnAgA */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:T4ElJZ_gGdR7NWob */ /* Drop if no profiles matched */
Chain cali-tw-cali049f31cdaa2 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ZyJ4qLuPp6aCIXBO */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:ouMc3PuZcy3f7R8j */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:envW87_OHXS_hwse */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:Faw0Ba903xmOdWx8 */
0 0 RETURN all -- any any anywhere anywhere /* cali:nIVLKN8vdQpARHLk */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:3TEx9gw4u2Jse7Cx */
0 0 RETURN all -- any any anywhere anywhere /* cali:WozS9tR0Frdy7ZQq */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:V06GVejtvLq_owdR */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:gRUObzSLj6ISVMUb */ /* Drop if no profiles matched */
Chain cali-tw-cali0576c91a912 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:F-tAtdZV4Vynawfg */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:zGsAdnHCgUGaUOra */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:rJcLILedkxyuo6as */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:OnPl8goqbiOqTu-s */
0 0 RETURN all -- any any anywhere anywhere /* cali:u3kYp5InkM0TCNfU */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:FYp3TgcH6IwSC9yZ */
0 0 RETURN all -- any any anywhere anywhere /* cali:4X7nGTP4nsvZvoZG */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:eOsEwEgsnLgt4XSN */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:7XVNNLCfw0WXJyxI */ /* Drop if no profiles matched */
Chain cali-tw-cali06114a20c1e (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:_KEBnL1yyW1APRLK */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:fqJCzx3OX6EWnsvr */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:UCsKGTOeJDkSgqo0 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:KYYPBY1Zw4Z7a_So */
0 0 RETURN all -- any any anywhere anywhere /* cali:FMcTw2OBXAN5NM7w */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:wk6xYfsmi0qDs9ZI */
0 0 RETURN all -- any any anywhere anywhere /* cali:UCe09JrHkRkXQni8 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:gcs4GC7Ty9n_6hQQ */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:hx1MjujD6GSt11GX */ /* Drop if no profiles matched */
Chain cali-tw-cali06aac5ed2e0 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:c555lDw8v6NEvuqK */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:l9LAa5EsCPDPXzao */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:hw_rAGwCUOLMV-XJ */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:FpxfMzhlv1yZ1vYF */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-pi-_YYnSgB46MA1TYU44kJq all -- any any anywhere anywhere /* cali:WJ2GKf8QAN_aAS0I */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:mQa5levsGm4UKNiO */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:Mc0XYeSHRYJDJyAU */ mark match 0x0/0x20000 nflog-prefix "DPI|default" nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:qBVouEA7WlwzvUPI */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pri-kns.calico-system all -- any any anywhere anywhere /* cali:gMbxSmCk7JodQlvZ */
0 0 RETURN all -- any any anywhere anywhere /* cali:Z5picu_5a3T2XEiL */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_jtt6i-KVVwZ-74H4ov all -- any any anywhere anywhere /* cali:j2O5PkACvP3sWuu6 */
0 0 RETURN all -- any any anywhere anywhere /* cali:89G5LGCHLD3luTGR */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:dMtRjX4osVeDG-uY */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:evVDsni4v86F7C-M */ /* Drop if no profiles matched */
Chain cali-tw-cali11a5a48ff09 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:nfniWZpOeYHMBO6Q */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:y1eV_IHKZdKF9Gwv */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:gSRCkQRzn8_mXMS4 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:7-t-SSmFeFUDRRFa */
0 0 RETURN all -- any any anywhere anywhere /* cali:6yBd3E45cb5Mvcfi */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:Wk0GGUcfKT7knCGU */
0 0 RETURN all -- any any anywhere anywhere /* cali:UrrtGeJithYey-8H */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:LHHh-tlQ1QhH8K1k */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:ghDS58J64_-8EKS7 */ /* Drop if no profiles matched */
Chain cali-tw-cali12e0df46963 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:XCBgvO8A4qL_Ah2j */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:75-HmvkcIgky2PLn */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Y0sK_Nh0i0QEgYov */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:7xMskYU9xqI2f9o2 */
0 0 RETURN all -- any any anywhere anywhere /* cali:iXhbHgqngCNDrrNG */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:wpUVu_W8J41qOUX4 */
0 0 RETURN all -- any any anywhere anywhere /* cali:kEoGnVaOIsSHYXMX */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:SAzuIwgFB6v0N84J */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:I9IvIfdUHarAlqAZ */ /* Drop if no profiles matched */
Chain cali-tw-cali13f46d88cc9 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:hFsq7V4wWs_DjcXy */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:SHuCHDjVhGypGEa7 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:byjysECQQzyF4GHf */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:MbWghpw5rGoTrnyI */
0 0 RETURN all -- any any anywhere anywhere /* cali:dLluPAM_s205jTWC */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:p10LWA_Oi6xVDAjV */
0 0 RETURN all -- any any anywhere anywhere /* cali:4CkszajCBi_D30iL */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:LO5wX1jnPlU7FBl5 */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:ccF7gQoX6sBmCWJ1 */ /* Drop if no profiles matched */
Chain cali-tw-cali145de1560bc (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:pl2M4elCGNSOG6vO */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:OBXvQAzOtUO5RJvB */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:cns2HVaeGibYQAIN */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:1H5t33cl1qh2e3AC */
0 0 RETURN all -- any any anywhere anywhere /* cali:kLSYSsrKNAc6SIGw */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:ZhLaFEBa720bVSXo */
0 0 RETURN all -- any any anywhere anywhere /* cali:6_CvUKnqsjECol-H */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:lLivgSqhNHmppA5R */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:E4H9s3robMQwtBpT */ /* Drop if no profiles matched */
Chain cali-tw-cali16870f08964 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:SvGd7uUUqYcwk8zI */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:S6Q_28-ciVdoLzi_ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:S9h5pjOrrXavR8cD */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:YfmNb6uvuOAHIx7w */
0 0 RETURN all -- any any anywhere anywhere /* cali:QOouY7Qt2-TbehGA */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:B-DbeIUoYtncJ3yR */
0 0 RETURN all -- any any anywhere anywhere /* cali:6eQNXmQzWjZTPhu5 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:sARIgAaLJlKVXr0p */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:bJveD9py7DuBNH50 */ /* Drop if no profiles matched */
Chain cali-tw-cali193f7d98be3 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:4HSb32pNOOY5e8rL */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:5OqLA_uMa8ATnyVn */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:NR2diol2aoXqyYxS */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:k8gjBiEFc_vM-fXC */
0 0 RETURN all -- any any anywhere anywhere /* cali:X0HcJxCOGm33gsON */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:1UHw-zounnChHkbB */
0 0 RETURN all -- any any anywhere anywhere /* cali:M8uuu4SPvl18kfkQ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:rQJBMck7sklBlHRS */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:KROHbcuuMM6YeXxg */ /* Drop if no profiles matched */
Chain cali-tw-cali1a3c10d6230 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:gSwncgGFxBUeL3GK */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Z-_DfSbPWwdP6Wo2 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:qce0OJUyfU9005DI */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:8Ai9AfHnV_7VJfle */
0 0 RETURN all -- any any anywhere anywhere /* cali:zDv1H8G0tsABCKQc */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:5fOxHdothnPc1qti */
0 0 RETURN all -- any any anywhere anywhere /* cali:yAJUy0fBGZAaZtlA */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:hK_-u2vkMXGrCY9r */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:puU79_O6fSLCAUxS */ /* Drop if no profiles matched */
Chain cali-tw-cali1a421c33dfc (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:w4ruCPsq3mDXTBmQ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:BPJBX7RbWu-8EsPy */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Qx9QR3CL473TJUL7 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:t95fGU7CVcsecfj0 */
0 0 RETURN all -- any any anywhere anywhere /* cali:CbX3nAu4K9vNnnm7 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:eBXm2l1MqsKcG6SG */
0 0 RETURN all -- any any anywhere anywhere /* cali:j3TPqLpxc-2qd4nD */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:gv0OaJu2ymj1JCT4 */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:kl4xJGsUOXRgtU7u */ /* Drop if no profiles matched */
Chain cali-tw-cali22e016245eb (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:wXbZVAek-zpdrG4L */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:VeLTJPjCFraCXNKT */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:CuwWQrw2jP0CyQD9 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:4Gskk6s0Ogqpsc4i */
0 0 RETURN all -- any any anywhere anywhere /* cali:b_Lr79V-abzTFphe */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:KJAu6FMmOO7OXQJO */
0 0 RETURN all -- any any anywhere anywhere /* cali:EmKYN3xBYa79k1Uf */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:p_p-bWp6fKkDnpvO */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:z017ygNk7b-shazL */ /* Drop if no profiles matched */
Chain cali-tw-cali2ea845f9301 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:jxru09a1pU2IhdjG */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:mMmVm4HvYX3j8sGF */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:B7EbxgDl_5P0-63y */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:NnPOwV_UJU0ID9Mm */
0 0 RETURN all -- any any anywhere anywhere /* cali:_Zkl4LN11Tfn5Tox */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:Q4fmu7URduQOAzID */
0 0 RETURN all -- any any anywhere anywhere /* cali:Z_R8aHeEZRfaSSab */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:7UjfZexhfhgyKh6- */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:d13si4docgE5VTJc */ /* Drop if no profiles matched */
Chain cali-tw-cali34bca5edd1b (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:flI04FQDcV0U1qe5 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:d64K3KM0v8AppEre */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:QZWPqt9M-CSBsaqK */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:PqUp8OL11jPg7PhC */
0 0 RETURN all -- any any anywhere anywhere /* cali:GL1KIo30H6-ASnoM */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:oPMdRKP5Ac8Nmr6f */
0 0 RETURN all -- any any anywhere anywhere /* cali:pqHkTeOUYcqpbQ7n */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:7aC_gaFu9rjbO1Ew */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:u7os1vmfsboUMwnD */ /* Drop if no profiles matched */
Chain cali-tw-cali3dd65087074 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:BBy7pEKkq-DGGgLk */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:NY7kO3e2pk_6l6PK */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:8n0VerEw1H-yuw5x */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:nkTXDgqHdSmrXoch */
0 0 RETURN all -- any any anywhere anywhere /* cali:Ve0QgDQZ_KZf26FE */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:PcGTBJeZf82YOygY */
0 0 RETURN all -- any any anywhere anywhere /* cali:jyA_AlRVWZXgpt5g */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:ICr14sRAeeLBLflL */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:iYlyRuUe2E8iLqm4 */ /* Drop if no profiles matched */
Chain cali-tw-cali4272878fdab (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:uFk9ovk6bp8fi_Sg */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:1WLB3kvQ0Et6vc_f */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:AwqbyKndz_B9z0J3 */ MARK and 0xfffcffff
0 0 cali-pri-kns.calico-system all -- any any anywhere anywhere /* cali:DbbzThA6i0_7J7Jr */
0 0 RETURN all -- any any anywhere anywhere /* cali:JmuE5vY3TWt72Swl */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_nzzjLvInId1gPHmQz_ all -- any any anywhere anywhere /* cali:oPZZbW0TRjp7c3F2 */
0 0 RETURN all -- any any anywhere anywhere /* cali:Nr8A3XSmLLNan6he */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:bTNhe8jxCa8YPD_Z */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:G4bar_Uw1PIBMoGJ */ /* Drop if no profiles matched */
Chain cali-tw-cali467b6a1f983 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ifX-5XDI3k6K1erX */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:70koaTE_EBsqyReG */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:YMfSsWU_Hsoe1sB2 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:_BJJtpk_qZrzKIRD */
0 0 RETURN all -- any any anywhere anywhere /* cali:1H5F8NnZcR-GYNn9 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:IA-LwdcThVx9hjm0 */
0 0 RETURN all -- any any anywhere anywhere /* cali:xjsyW6Fqig1z-5Rl */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:YpkexAHLqVbvjAvh */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:W3BwJKBwr8d84pIB */ /* Drop if no profiles matched */
Chain cali-tw-cali502fc901a2f (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:kx1ojIS1wytb146D */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:jqx8r97NKbnpsPSQ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:IFWGkyqkQ3aREfHR */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:Ne4vg43q6eqNP9vz */
0 0 RETURN all -- any any anywhere anywhere /* cali:_0mbBWi5AuXCattx */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:iAwQB9XIQ0oOY1Il */
0 0 RETURN all -- any any anywhere anywhere /* cali:hbcc1wL50I6ibg29 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:RIjP_wD42gfBdkSd */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:XqbgXpFxLAohYWlt */ /* Drop if no profiles matched */
Chain cali-tw-cali5374357b2dd (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:9aKbhPoToLZRgHmK */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:r0Te7hwm-88D1sa0 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:FTJW7kOauxbpj0Qs */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:rJy8zFlQDKJP_5ye */
0 0 RETURN all -- any any anywhere anywhere /* cali:PHrFqaNbRvJFsFWu */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:fsHUU1qc3BLLzZwK */
0 0 RETURN all -- any any anywhere anywhere /* cali:FTkb2t5sEg2-M-nA */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:Yqc5m1-09Rr8yOeM */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:7yNpju3U88TDbMYM */ /* Drop if no profiles matched */
Chain cali-tw-cali57581718244 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:KF7DUtstr2zhtzAW */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Rd6p2M53g1MVmjWp */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:QHVzPVCsKua7DvE7 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:N57uF2NKswafX-5f */
0 0 RETURN all -- any any anywhere anywhere /* cali:64RiwtQY7gl51vjc */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:Z4pCRn841XuobCwj */
0 0 RETURN all -- any any anywhere anywhere /* cali:m4E8SdMa0QADZwqI */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:GJ57ER32GlnnamrC */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:CD1tAcfwFSClfygC */ /* Drop if no profiles matched */
Chain cali-tw-cali5ed4c1e9a39 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:VgZ8ElOwp8agVeYl */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:OHhFwSMC2yU6T1Bm */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:2MdDe4kgP-KNurlk */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:W7fKInFOxgYmKEO- */
0 0 RETURN all -- any any anywhere anywhere /* cali:yS9lPFi2hzoy9oic */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:hwTRlM-XslkbwuDA */
0 0 RETURN all -- any any anywhere anywhere /* cali:7mE7jikTWmnfw21L */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:nXun9M3klNjN9G7e */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:LNZbOUwLGcJRM4l9 */ /* Drop if no profiles matched */
Chain cali-tw-cali609774fb6ac (1 references)
pkts bytes target prot opt in out source destination
5 859 ACCEPT all -- any any anywhere anywhere /* cali:sJu3w5eNB57CiBcy */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Wx09Sk-H52WbD-Rx */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Yta1cofPoqJL4ffB */ MARK and 0xfffcffff
0 0 cali-pri-kns.kube-system all -- any any anywhere anywhere /* cali:e7UJC46Mk1C1FOKX */
0 0 RETURN all -- any any anywhere anywhere /* cali:TsX3maC3p512hzqr */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:VMjE0CFZKVfwgWDF */
0 0 RETURN all -- any any anywhere anywhere /* cali:ybRhR2mVI06xBuDv */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:RmzkFHsOWEO-HTDQ */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:j7Lypy0LdHZNj02E */ /* Drop if no profiles matched */
Chain cali-tw-cali6099c4a8778 (1 references)
pkts bytes target prot opt in out source destination
2 364 ACCEPT all -- any any anywhere anywhere /* cali:gxz5hjC_qZgKETeb */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:sSJcdTDxOhxc2ed_ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:6V7642F0MEwXG_UQ */ MARK and 0xfffcffff
0 0 cali-pri-kns.kube-system all -- any any anywhere anywhere /* cali:zx56TronI46_QoN_ */
0 0 RETURN all -- any any anywhere anywhere /* cali:9fNYQmxqIMDKolAY */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:p6XqJuM21eUWHhES */
0 0 RETURN all -- any any anywhere anywhere /* cali:zJrOfGy-rMthiJs3 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:98aRvo86vmnuuYbQ */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:giWvH5Q1u9OJE8-L */ /* Drop if no profiles matched */
Chain cali-tw-cali669be974601 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:h1l3XMe37NElCV9H */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:HVkhb_-I1Hi50x-_ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:RcfYSTHKLBXPE-ig */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:LZ822ohcJ0pGHXPY */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-pi-_U7WUiLyTu5Vc3j6v19u all -- any any anywhere anywhere /* cali:GaaTm6sp_hjVv9d7 */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:zbbF_lwLggXZhbsh */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:Kfan89p-8nmhpyut */ mark match 0x0/0x20000 nflog-prefix "DPI|default" nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:P0HmTDGvKjZA7ObZ */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pri-kns.calico-system all -- any any anywhere anywhere /* cali:Zb0RsO_Oojsc8jhJ */
0 0 RETURN all -- any any anywhere anywhere /* cali:7zYWqia-NDr3mbt9 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_eY4Bnp6m80Op5FOwqd all -- any any anywhere anywhere /* cali:l0GwWExCQKpQqZeL */
0 0 RETURN all -- any any anywhere anywhere /* cali:JF2etY45m-jEPkmF */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:CiN3yx4yD6shjEBF */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:q_OTAD8tz05jFP0f */ /* Drop if no profiles matched */
Chain cali-tw-cali6c3741a667a (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:_-hTVu67BA-6wtT0 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:I_sj1Z8xx5Ag6O8N */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:dpNSsJGWKKnvmKzh */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:6g9uHH15lwQYMwOh */
0 0 RETURN all -- any any anywhere anywhere /* cali:g32L2e51Jc3W-yRZ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:BsSiO_GakOMntQBF */
0 0 RETURN all -- any any anywhere anywhere /* cali:0ePc_sHXFmsqtZPh */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:hR68UUG6j09FuKrs */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:RR0CYDLik6FcWUWj */ /* Drop if no profiles matched */
Chain cali-tw-cali6d815386f40 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:4tkjU00EK35Eyos1 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:pP1VrRnCnMa0rJ0v */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:5FFgj7fX7hMoAOqw */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:0tkkpESOdP-ZbGOe */
0 0 RETURN all -- any any anywhere anywhere /* cali:iryfZCziNz45G6o6 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:_Cwou55Po95MPphB */
0 0 RETURN all -- any any anywhere anywhere /* cali:ftYfkj2mTF2eyiWc */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:WCEGfYX2n82oblLY */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:pYnTUurQxrZ-_Lrq */ /* Drop if no profiles matched */
Chain cali-tw-cali6e9e9baed01 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:YuqTc5UBW0qfYvs7 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Y5Cbjk-KTWCjaOU8 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:c93loJvAD_2t2pdD */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:DNtBf_uQdOPsZyYw */
0 0 RETURN all -- any any anywhere anywhere /* cali:fKN5ZUtw41lh62ah */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:CNxoaFPKfSKLud0g */
0 0 RETURN all -- any any anywhere anywhere /* cali:loxejuuvBhVLMOIJ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:u2P2Jl7yb63oL0gT */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:-aJfcB1O-kg_LlO0 */ /* Drop if no profiles matched */
Chain cali-tw-cali701e7cc6c80 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:QBBweUTQ3jtqy4z0 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:g19zmvKLdg9ucMZV */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:j70EzIVYK1nh072O */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:k8jWj3lJm4oByAHI */
0 0 RETURN all -- any any anywhere anywhere /* cali:A9F0Z5xaN4O9WkET */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:vqPtbFqiNN48bx0P */
0 0 RETURN all -- any any anywhere anywhere /* cali:2WonGd6cXzIDF3GW */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:oRqaLf2gFveupleO */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:gKD-zZQPi4aQ5YjG */ /* Drop if no profiles matched */
Chain cali-tw-cali736792029c9 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:EquqzdIWsZFFHnyS */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:wYdnuEml76HtNbnH */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Ww1Gz6D2fL9R-qfS */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:55BfAZYpBYxfueJR */
0 0 RETURN all -- any any anywhere anywhere /* cali:sOA-pjpShK9eeIEr */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:hLh0zvEOz7sZbQNZ */
0 0 RETURN all -- any any anywhere anywhere /* cali:New1cs2jLYoJjQZI */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:0D0wJyv8H9VZbTsC */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:wscN8ZKobRuQ3H8G */ /* Drop if no profiles matched */
Chain cali-tw-cali741adbc0280 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:-ZxC3tIHflOZPRf4 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:YblrRqfsNv1NUEV0 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:CTjn3EaQ1OR8bxrc */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:ICgO6l1w_FxMlhK3 */
0 0 RETURN all -- any any anywhere anywhere /* cali:4jmIoez2RC_DX4Bd */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:iiohb9XdaGXfCTFd */
0 0 RETURN all -- any any anywhere anywhere /* cali:ITHuZjlyQBjVDZt_ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:ncNkkDFNO6B0SIKt */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:90LjeGFYqKcZvVl4 */ /* Drop if no profiles matched */
Chain cali-tw-cali7b7a4c8576a (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:VwjqXnLYoyxKB3a3 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:-LT0fXscviWSaxUC */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:ktRG-XWhk4mgumBt */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:MO4-hUodca5HakmA */
0 0 RETURN all -- any any anywhere anywhere /* cali:ZoBPpXHImqMgJwXT */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:X3KHKOqdsazYbGoA */
0 0 RETURN all -- any any anywhere anywhere /* cali:YtdpypmluZYXcMkB */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:AFuJrMX5lRTTw8p2 */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:73fiDsOc0kNF_ctk */ /* Drop if no profiles matched */
Chain cali-tw-cali81ba87c5c60 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Gy0X-vxlALTz7C35 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:dnYsTC65o_peJqf3 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:riyc4wxbSxrykP-S */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:ELiRLlAVni4a77Rf */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-pi-_FDiLImilezd09cpg5ci all -- any any anywhere anywhere /* cali:YHWNXCHsXemi4THB */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:AoALLcfz5bJqjd66 */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:P_DswWX1TRDbKCD0 */ mark match 0x0/0x20000 nflog-prefix "DPI|default" nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:3gFxm2uMOKh3EWrv */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pri-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:xIGUZ5A2RhmAzHrT */
0 0 RETURN all -- any any anywhere anywhere /* cali:ZawFZdgnMVHS1tir */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:ydls_PAUcEd5Z0Ox */
0 0 RETURN all -- any any anywhere anywhere /* cali:aLFjXlQW5ede-IDZ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:VWBqPIkLXAI0bWt_ */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:b08WLkHQ1BX8inxz */ /* Drop if no profiles matched */
Chain cali-tw-cali82b79fb83c5 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:KTgWcrppVBFrqEI0 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:QYpuitkqzhJEH2oP */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:uUyvrCtNaO7UHsJu */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:uDSPlVP0uN40MEll */
0 0 RETURN all -- any any anywhere anywhere /* cali:VlTEdnq2wM09vLTr */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:GrthvQXjtvl7Ptea */
0 0 RETURN all -- any any anywhere anywhere /* cali:zXiRBMeM1ECw3bpT */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:gagL4162mmBfZX0U */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:hDcyQXphk1up_ND6 */ /* Drop if no profiles matched */
Chain cali-tw-cali83c474a3c81 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:V7i_MKzUqxZs21lY */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:8DB6Er27NGU0sV1l */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:JiGJs17mA4MlFvOd */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:4KUir4phCTN7Eadz */
0 0 RETURN all -- any any anywhere anywhere /* cali:nYme-4GOWUoMoFqV */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:MUPk4FnWNdnhcCsR */
0 0 RETURN all -- any any anywhere anywhere /* cali:1NVaGOy-H_fiO7Sh */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:3IV2ce-gJ59fqhJh */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:boGNmsi5tI10XOia */ /* Drop if no profiles matched */
Chain cali-tw-cali8706671fffc (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:HehqE_HA3UAGJd1e */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:KfSobj_hp0V1tf80 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:hiEwTx8XUKbfc1AT */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:hFJpLNexnzBDI8Pt */
0 0 RETURN all -- any any anywhere anywhere /* cali:bSfusti6LVBgLb-F */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:v-IJuyutgqgvYJvE */
0 0 RETURN all -- any any anywhere anywhere /* cali:hKPynAAs48PaFako */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:3KG7iQpNmzucx-yO */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:Cr9h6B5eawYbxrIs */ /* Drop if no profiles matched */
Chain cali-tw-cali8d4a964a1b2 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:HB67oH3MOGykNE3m */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:e3ekLWWeYTkpcJc1 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:exbV6amOafJiZcBc */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:ouwSMhNU8iufYxnS */
0 0 RETURN all -- any any anywhere anywhere /* cali:-rVu1Yt74y8QmJKy */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:CVCQdEYWSirNEr9b */
0 0 RETURN all -- any any anywhere anywhere /* cali:KB-7-1zE4H0AoPV6 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:9riFbij4kloLHOLV */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:KugU7yM8QjU6Fno1 */ /* Drop if no profiles matched */
Chain cali-tw-cali91725ef2e87 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:43qet0eqXiPv9rnl */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:UHz4qJVMBJYR_89M */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:7IwcK8g0MtT6Rnzb */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:IhmkjLHfZ_R3o_y3 */
0 0 RETURN all -- any any anywhere anywhere /* cali:UpNx5-ePFR4r20zW */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:v6PwTvZ2pHaul3-g */
0 0 RETURN all -- any any anywhere anywhere /* cali:vqtWsfOl9VdjLws- */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:krDC0ieK9MboFD8V */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:bQGuNpMYmlMdOunK */ /* Drop if no profiles matched */
Chain cali-tw-cali9633dc47c02 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ohvMMGkdFo--LBJ8 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:8wUjXXDyXtdgqs0X */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:lbqylCylnuAEVM9T */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:QNTxIxeZmrJCiSwL */
0 0 RETURN all -- any any anywhere anywhere /* cali:axH9f1jSTf4TAlgY */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:-kw4yh2uy8A_u--5 */
0 0 RETURN all -- any any anywhere anywhere /* cali:YFuG3OTT8yWAId__ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:rPvzZnryESvO5n6a */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:WFh1w_f1eS2pq_36 */ /* Drop if no profiles matched */
Chain cali-tw-cali9986e181eac (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:7jfOji6sM1RkMLfv */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:qHb3611dUOk-k1hq */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:NZPqjVnEAQlkqRlY */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:X59V5VbGTFLjafy- */
0 0 RETURN all -- any any anywhere anywhere /* cali:nRjz9ATDhQ5YyaP9 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:gWByjPR15nkH0GWZ */
0 0 RETURN all -- any any anywhere anywhere /* cali:BB_mOuTQYHWxy_kt */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:bEwl3G_5yXOaiUdm */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:5O2LTfDlEYQ5UW_w */ /* Drop if no profiles matched */
Chain cali-tw-cali99c2052d800 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:KPVCpHq2PCQ_wKmZ */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:Exc_t0YLDqW0nQ_4 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:XqwqVIkLv5HB3y3L */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:XJ8XQDVgkCjN7Rnz */
0 0 RETURN all -- any any anywhere anywhere /* cali:wi_F4w9L7BDxoKjd */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:QAQyHdaxqABilIfq */
0 0 RETURN all -- any any anywhere anywhere /* cali:WlC5njas_lb6lksE */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:rN_TChA9wlMLCdIs */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:ZY90d2aOFZUbiimK */ /* Drop if no profiles matched */
Chain cali-tw-cali9c22f997550 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:uxyztrxadOhOh_N0 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:OcMupkm9qOQkDfA9 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:o19fPfYyy7K7xEZT */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:5wgvLM7VnBX5Ww0d */
0 0 RETURN all -- any any anywhere anywhere /* cali:-i10w_lb12pkVyrt */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:tx70MAgmvk9CJjiu */
0 0 RETURN all -- any any anywhere anywhere /* cali:sWfdu_RrdZoz0gjp */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:ObKUG6Mua5t18XHL */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:Dcny7KiHorg0v3yA */ /* Drop if no profiles matched */
Chain cali-tw-cali9c9451f75ea (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:pbwfaW-_fnN0CuVv */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:UZ9fvMbUqiyPY_gQ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:NibJ4liPSn9qCP6h */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:55TRMI8-PR2u2OTM */
0 0 RETURN all -- any any anywhere anywhere /* cali:wveAM8d9mbdBG9z0 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:iQEXlMTf3w5q6yvK */
0 0 RETURN all -- any any anywhere anywhere /* cali:1dSxask3Ks7MmK1s */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:0yrvtoxHgxySzopI */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:yqbBUGuBAD4rm5jh */ /* Drop if no profiles matched */
Chain cali-tw-caliac90068d900 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:kILLmJxJv7B2Tk1e */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:0PrVKhyluMvQFrGw */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:2JdIN2GajDi1m2RW */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:WZH_XJcJIuAMB_CD */
0 0 RETURN all -- any any anywhere anywhere /* cali:Za4KmPHnIT_MnobV */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:I3uLeFyIGN9nH4UR */
0 0 RETURN all -- any any anywhere anywhere /* cali:GTMQ5NKPwRluX8r0 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:bqilk_WjZiWOKDYF */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:BkS7dyAUsRthkAA4 */ /* Drop if no profiles matched */
Chain cali-tw-calib19e4206d8c (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:FV50iHh2-x7GthcP */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:8r2xYU4KDkR-bXxZ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:CTNhWJjbjuHPup89 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:dPoBen7OjNOCAM3_ */
0 0 RETURN all -- any any anywhere anywhere /* cali:YdopIEctVNOBWgXi */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:Li5nOmFcB8JNwXW4 */
0 0 RETURN all -- any any anywhere anywhere /* cali:i4RAEIZz4Afwyd5x */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:GLkZN9oRH1qpzQZy */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:Uf3PNtY2mNIRSnH- */ /* Drop if no profiles matched */
Chain cali-tw-calib4366e6156c (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:ukc16mhEa4BokeMU */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:CAenoxAqUifbj07S */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:X7kX1gFvEGhLfolf */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:aT-N21PP1hCFaXJe */
0 0 RETURN all -- any any anywhere anywhere /* cali:QMY8DejCM0hlCV7i */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:G-AaczUo-Helg8J5 */
0 0 RETURN all -- any any anywhere anywhere /* cali:cCnGYY0mhto-YyQ1 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:AvvzXTcZ4OEUDMKr */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:fHnZp2DLYTmYSi2v */ /* Drop if no profiles matched */
Chain cali-tw-calibbfcc132cfe (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:oLhLwv9bmiUm6La- */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:v5tEUyZ9NPz5TuU5 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:02gXCChX-89_au-v */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:Nqj5MBchVuu2ydme */
0 0 RETURN all -- any any anywhere anywhere /* cali:Tz1-fSK8izWQUwfM */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:kFh4DhS-YwzVAWoc */
0 0 RETURN all -- any any anywhere anywhere /* cali:Vwb33B1I6iVvpxpQ */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:Xks76Out9Mi_4lWP */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:hb1EmV5VE8k7EzTI */ /* Drop if no profiles matched */
Chain cali-tw-calic2b72c3abdd (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:5Yh5CbEo7c_nWvKC */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:aCTmfwH3ci3oouE8 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:mzGwpXMjapFe4jDx */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:g5_AB2EmQ-sGVoH- */
0 0 RETURN all -- any any anywhere anywhere /* cali:FRNQY_ZzOM172McS */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:0ZFULMQZE4Dbz5F5 */
0 0 RETURN all -- any any anywhere anywhere /* cali:lfhUNWYUT25XnB1H */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:0_9kkp2RnOafzZZ1 */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:ZwRNNwc8OBwYfyXf */ /* Drop if no profiles matched */
Chain cali-tw-calid1d7cde9caf (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:hRB7-XctUPe88ZZk */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:5Ny6avYv85JPoRJe */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:GagZ9dIGbokhPHxE */ MARK and 0xfffcffff
0 0 cali-pri-kns.calico-system all -- any any anywhere anywhere /* cali:F731l3J44k4KjdP2 */
0 0 RETURN all -- any any anywhere anywhere /* cali:kbRHg540tOh4N_cM */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_ymJUz7yzI6NOKJhG2- all -- any any anywhere anywhere /* cali:R-xhL_4Y7U5IZG0o */
0 0 RETURN all -- any any anywhere anywhere /* cali:8vXJnWejqyZVtA2j */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:Czhrh2_H9p8Flack */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:h0Ci5MaToujH7Y0W */ /* Drop if no profiles matched */
Chain cali-tw-calid41ffc7ab4f (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:aTayAZ5agdyIAXDM */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:CGs2H1PP54IFw2FQ */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:TWi_0txsYeZsuv2p */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:F3EenUrP-_hl2iKY */
0 0 RETURN all -- any any anywhere anywhere /* cali:Ncqpa0UmmtOunm4B */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:F205l8PmOSEEjg1M */
0 0 RETURN all -- any any anywhere anywhere /* cali:WYV78cZBoqhQB7Fi */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:FLjRDU6cPkiR98u5 */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:UqRNwOK9CmVBtScu */ /* Drop if no profiles matched */
Chain cali-tw-calie02f19b12c9 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:19B2mzPE09ds6VlG */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:XoRXLUuJDaNF-51z */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:2d-0D0OoAyjGsm67 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:RCXaq4WyK9OFAln0 */
0 0 RETURN all -- any any anywhere anywhere /* cali:JnaUV5jmngsdVWE6 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:4xWwxUHidQ3u_SXI */
0 0 RETURN all -- any any anywhere anywhere /* cali:dpCYRgAdGhPHap_0 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:J6DEGkzC96YpQb7i */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:VCzxS6T2ZYFwIv56 */ /* Drop if no profiles matched */
Chain cali-tw-calie0317e52f89 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:CnBmj22LXLoMivnI */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:I4ZOh99DWKcjWb4d */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:NOqSW06Y1s6nzYSE */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:HcxR6qrntVihZX_i */
0 0 RETURN all -- any any anywhere anywhere /* cali:LlQk9nJMtvWqTmEt */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:92dAv5jn6m3GGvz- */
0 0 RETURN all -- any any anywhere anywhere /* cali:cVlrDZ_alHNFz5F7 */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:MjO3Vfg57rAN-kZ9 */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:7miMhnS0O8pOCHmm */ /* Drop if no profiles matched */
Chain cali-tw-calie1470bf4a1a (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:Ed-Xy-nSmbXoXVl3 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:UL2tglOaolMXZIpu */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:UjbvFTOC_8vLivW6 */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:HHPtowFTFZUTQG9z */
0 0 RETURN all -- any any anywhere anywhere /* cali:XQI_g5XHY2YHSnRU */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:LxLwsnsUoGXb3K28 */
0 0 RETURN all -- any any anywhere anywhere /* cali:E0iowIc0mFb4gpsf */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:BeMvE-QopCe0XEZo */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:KpP7vVXrDlG7RCBO */ /* Drop if no profiles matched */
Chain cali-tw-calie33122e4c45 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:VdarGeznwfx4Hq-J */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:sh875ISdhQGGV8Wc */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:VaoJ_PUsxIRsRa8T */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:F5OJOXUV_8O9g8le */
0 0 RETURN all -- any any anywhere anywhere /* cali:0sRy7gghZ5mdrqNx */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:w5Uv72ziKVSVGMHC */
0 0 RETURN all -- any any anywhere anywhere /* cali:EA8xvlF806lnMVDS */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:PhLnLpu3ykPP2jLe */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:H665Q4ohOYJ_HCfK */ /* Drop if no profiles matched */
Chain cali-tw-calie6cedf7bf9e (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:jf28HIKbuJgSzGxL */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:hZS_FAYtozjOGdZ2 */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:EdKPil7hzWl-ahSL */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:hRZPMZ_ow1itdpvS */
0 0 RETURN all -- any any anywhere anywhere /* cali:PtHrEoPbuK1JqGhS */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:Wpxop1SO0C0xjVa2 */
0 0 RETURN all -- any any anywhere anywhere /* cali:SPKLcqlsz69gcl3P */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:APJpy649sfm71rjl */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:WcN6tNNxAO24c9WA */ /* Drop if no profiles matched */
Chain cali-tw-calif9c0036887f (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:oz6V_BjWPUSq7jy5 */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:JZiEwCde79_2aQ3D */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:5YYDmkvghoKIT4HF */ MARK and 0xfffcffff
0 0 MARK all -- any any anywhere anywhere /* cali:kuUbQTgPPemCTHeq */ /* Start of tier default */ MARK and 0xfffdffff
0 0 cali-pi-_FDiLImilezd09cpg5ci all -- any any anywhere anywhere /* cali:-C7QLAUoc3x5XM2z */ mark match 0x0/0x20000
0 0 RETURN all -- any any anywhere anywhere /* cali:RhzhIHkCtnt14BtH */ /* Return if policy accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:p3U8oDWkDg76_5Qi */ mark match 0x0/0x20000 nflog-prefix "DPI|default" nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:zREqD0Ifnn3YZczJ */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000
0 0 cali-pri-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:n_TfwTgRacq2ISJk */
0 0 RETURN all -- any any anywhere anywhere /* cali:jNQ4GO9aXgRSxthL */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:qbUxg1aaMRQ1Ixb9 */
0 0 RETURN all -- any any anywhere anywhere /* cali:QSeh5D0_4n_HHlgh */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:J_1DyLl_VrfD0WzH */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:v7INK_KCSelACDS8 */ /* Drop if no profiles matched */
Chain cali-tw-califa6bc0a3251 (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- any any anywhere anywhere /* cali:DDTlgYvq4AB6dbdb */ ctstate RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* cali:v27apwpTyimvAZIG */ ctstate INVALID
0 0 MARK all -- any any anywhere anywhere /* cali:Qolyv9MpIfdZ7e_S */ MARK and 0xfffcffff
0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:-ktXtquYR4b8Ueuz */
0 0 RETURN all -- any any anywhere anywhere /* cali:neK7oe2BnX8uqT1v */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:6sxk636BQPTicdnW */
0 0 RETURN all -- any any anywhere anywhere /* cali:_e8g4vj7eO_6uWyL */ /* Return if profile accepted */ mark match 0x10000/0x10000
0 0 NFLOG all -- any any anywhere anywhere /* cali:54BkHOdehlTfZH7Y */ nflog-prefix DRI nflog-group 1 nflog-size 80
0 0 DROP all -- any any anywhere anywhere /* cali:hhAbzQSQaL-AQnNH */ /* Drop if no profiles matched */
Chain cali-wl-to-host (1 references)
pkts bytes target prot opt in out source destination
58M 10G cali-from-wl-dispatch all -- any any anywhere anywhere /* cali:Ee9Sbo10IpVujdIY */
32008 1920K ACCEPT all -- any any anywhere anywhere /* cali:nSZbcOoG1xPONxb8 */ /* Configured DefaultEndpointToHostAction */
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment