Created
September 10, 2025 08:21
-
-
Save fmuyassarov/f869dbd962d38a97bdd06048df6ce355 to your computer and use it in GitHub Desktop.
calico_ipvs_4.txt
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Chain INPUT (policy ACCEPT 827M packets, 270G bytes) | |
| pkts bytes target prot opt in out source destination | |
| 299K 192M cali-INPUT all -- any any anywhere anywhere /* cali:Cz_u1IQiXIMmKD4c */ | |
| 344K 231M KUBE-IPVS-FILTER all -- any any anywhere anywhere /* kubernetes ipvs access filter */ | |
| 344K 231M KUBE-PROXY-FIREWALL all -- any any anywhere anywhere /* kube-proxy firewall rules */ | |
| 344K 231M KUBE-NODE-PORT all -- any any anywhere anywhere /* kubernetes health check rules */ | |
| 12M 717M KUBE-PROXY-FIREWALL all -- any any anywhere anywhere ctstate NEW /* kubernetes load balancer firewall */ | |
| 827M 270G KUBE-NODEPORTS all -- any any anywhere anywhere /* kubernetes health check service ports */ | |
| 12M 717M KUBE-EXTERNAL-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes externally-visible service portals */ | |
| 827M 270G KUBE-FIREWALL all -- any any anywhere anywhere | |
| Chain FORWARD (policy ACCEPT 2 packets, 181 bytes) | |
| pkts bytes target prot opt in out source destination | |
| 16 2110 cali-FORWARD all -- any any anywhere anywhere /* cali:wUHhoiAYhphO9Mso */ | |
| 8 714 KUBE-PROXY-FIREWALL all -- any any anywhere anywhere /* kube-proxy firewall rules */ | |
| 817K 87M KUBE-PROXY-FIREWALL all -- any any anywhere anywhere ctstate NEW /* kubernetes load balancer firewall */ | |
| 1164K 1940M KUBE-FORWARD all -- any any anywhere anywhere /* kubernetes forwarding rules */ | |
| 817K 87M KUBE-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes service portals */ | |
| 816K 87M KUBE-EXTERNAL-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes externally-visible service portals */ | |
| 816K 87M DOCKER-USER all -- any any anywhere anywhere | |
| 816K 87M DOCKER-FORWARD all -- any any anywhere anywhere | |
| 8 714 ACCEPT all -- any any anywhere anywhere /* cali:S93hcgKJrXEqnTfs */ /* Policy explicitly accepted packet. */ mark match 0x10000/0x10000 | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:mp77cMpurHhyjLrM */ MARK or 0x10000 | |
| Chain OUTPUT (policy ACCEPT 882M packets, 293G bytes) | |
| pkts bytes target prot opt in out source destination | |
| 299K 195M cali-OUTPUT all -- any any anywhere anywhere /* cali:tVnHkvAo15HuiPy0 */ | |
| 350K 235M KUBE-IPVS-OUT-FILTER all -- any any anywhere anywhere /* kubernetes ipvs access filter */ | |
| 15M 883M KUBE-PROXY-FIREWALL all -- any any anywhere anywhere ctstate NEW /* kubernetes load balancer firewall */ | |
| 15M 883M KUBE-SERVICES all -- any any anywhere anywhere ctstate NEW /* kubernetes service portals */ | |
| 882M 293G KUBE-FIREWALL all -- any any anywhere anywhere | |
| Chain DOCKER (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT tcp -- !br-bc18ce9c999c br-bc18ce9c999c anywhere 172.18.0.2 tcp dpt:6443 | |
| 0 0 DROP all -- !docker0 docker0 anywhere anywhere | |
| 0 0 DROP all -- !br-bc18ce9c999c br-bc18ce9c999c anywhere anywhere | |
| Chain DOCKER-BRIDGE (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 DOCKER all -- any docker0 anywhere anywhere | |
| 0 0 DOCKER all -- any br-bc18ce9c999c anywhere anywhere | |
| Chain DOCKER-CT (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any docker0 anywhere anywhere ctstate RELATED,ESTABLISHED | |
| 0 0 ACCEPT all -- any br-bc18ce9c999c anywhere anywhere ctstate RELATED,ESTABLISHED | |
| Chain DOCKER-FORWARD (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 816K 87M DOCKER-CT all -- any any anywhere anywhere | |
| 816K 87M DOCKER-ISOLATION-STAGE-1 all -- any any anywhere anywhere | |
| 816K 87M DOCKER-BRIDGE all -- any any anywhere anywhere | |
| 3502 219K ACCEPT all -- docker0 any anywhere anywhere | |
| 453 27180 ACCEPT all -- br-bc18ce9c999c any anywhere anywhere | |
| Chain DOCKER-ISOLATION-STAGE-1 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 3502 219K DOCKER-ISOLATION-STAGE-2 all -- docker0 !docker0 anywhere anywhere | |
| 453 27180 DOCKER-ISOLATION-STAGE-2 all -- br-bc18ce9c999c !br-bc18ce9c999c anywhere anywhere | |
| Chain DOCKER-ISOLATION-STAGE-2 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 DROP all -- any br-bc18ce9c999c anywhere anywhere | |
| 0 0 DROP all -- any docker0 anywhere anywhere | |
| Chain DOCKER-USER (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 816K 87M RETURN all -- any any anywhere anywhere | |
| Chain KUBE-EXTERNAL-SERVICES (2 references) | |
| pkts bytes target prot opt in out source destination | |
| Chain KUBE-FIREWALL (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 DROP all -- any any !localhost/8 localhost/8 /* block incoming localnet connections */ ! ctstate RELATED,ESTABLISHED,DNAT | |
| Chain KUBE-FORWARD (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* kubernetes forwarding rules */ mark match 0x4000/0x4000 | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* kubernetes forwarding conntrack rule */ ctstate RELATED,ESTABLISHED | |
| Chain KUBE-IPVS-FILTER (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 RETURN all -- any any anywhere anywhere match-set KUBE-LOAD-BALANCER dst,dst | |
| 0 0 RETURN all -- any any anywhere anywhere match-set KUBE-CLUSTER-IP dst,dst | |
| 0 0 RETURN all -- any any anywhere anywhere match-set KUBE-EXTERNAL-IP dst,dst | |
| 0 0 RETURN all -- any any anywhere anywhere match-set KUBE-EXTERNAL-IP-LOCAL dst,dst | |
| 0 0 RETURN all -- any any anywhere anywhere match-set KUBE-HEALTH-CHECK-NODE-PORT dst | |
| 0 0 REJECT all -- any any anywhere anywhere ctstate NEW match-set KUBE-IPVS-IPS dst reject-with icmp-port-unreachable | |
| Chain KUBE-IPVS-OUT-FILTER (1 references) | |
| pkts bytes target prot opt in out source destination | |
| Chain KUBE-KUBELET-CANARY (0 references) | |
| pkts bytes target prot opt in out source destination | |
| Chain KUBE-NODE-PORT (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* Kubernetes health check node port */ match-set KUBE-HEALTH-CHECK-NODE-PORT dst | |
| Chain KUBE-NODEPORTS (1 references) | |
| pkts bytes target prot opt in out source destination | |
| Chain KUBE-PROXY-CANARY (0 references) | |
| pkts bytes target prot opt in out source destination | |
| Chain KUBE-PROXY-FIREWALL (5 references) | |
| pkts bytes target prot opt in out source destination | |
| Chain KUBE-SERVICES (2 references) | |
| pkts bytes target prot opt in out source destination | |
| Chain KUBE-SOURCE-RANGES-FIREWALL (0 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 DROP all -- any any anywhere anywhere | |
| Chain cali-FORWARD (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 18M 13G MARK all -- any any anywhere anywhere /* cali:W_vvds1Nw3n9QE2f */ MARK and 0xffe5ffff | |
| 18M 13G cali-from-hep-forward all -- any any anywhere anywhere /* cali:ZfgmjuiLaA8Pg0kp */ mark match 0x0/0x10000 | |
| 18M 10G cali-from-wl-dispatch all -- cali+ any anywhere anywhere /* cali:tAzwBLPaV-j53OOZ */ | |
| 971K 506M cali-to-wl-dispatch all -- any cali+ anywhere anywhere /* cali:4Z0Pf0byo05NFe-P */ | |
| 1164K 1940M cali-to-hep-forward all -- any any anywhere anywhere /* cali:hQ7Oc16wmUtLuneJ */ | |
| 1164K 1940M cali-cidr-block all -- any any anywhere anywhere /* cali:rnKNH2WxGcRQcIlD */ | |
| Chain cali-INPUT (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT udp -- any any anywhere anywhere /* cali:J76FwxInZIsk7uKY */ /* Allow IPv4 VXLAN packets from allowed hosts */ multiport dports 4789 match-set cali40all-vxlan-net src ADDRTYPE match dst-type LOCAL | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:EDCNTTxYfggApx8C */ /* Drop IPv4 VXLAN packets from non-allowed hosts */ multiport dports 4789 ADDRTYPE match dst-type LOCAL | |
| 299K 192M MARK all -- any any anywhere anywhere /* cali:Hz1t719gvzQYArBa */ MARK and 0x1fffff | |
| 299K 192M cali-forward-check all -- any any anywhere anywhere /* cali:rt1ceUt-QunCljVo */ | |
| 34 2460 RETURN all -- any any anywhere anywhere /* cali:5TfExhsEygaw5WNP */ mark match ! 0x0/0xffe00000 | |
| 6688 1682K cali-wl-to-host all -- cali+ any anywhere anywhere [goto] /* cali:j6OiaG2jjZFeTZte */ | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:WU4wJ9petBl26un4 */ mark match 0x10000/0x10000 | |
| 292K 191M MARK all -- any any anywhere anywhere /* cali:_mSLQGQIis29dwhH */ MARK and 0xffe4ffff | |
| 292K 191M cali-from-host-endpoint all -- any any anywhere anywhere /* cali:pt2p0_J8ELXMHiay */ | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:-4XE-lAiaxcnxl-8 */ /* Host endpoint policy accepted packet. */ mark match 0x10000/0x10000 | |
| Chain cali-OUTPUT (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:Mq1_rAdXXH3YkrzW */ mark match 0x10000/0x10000 | |
| 0 0 cali-forward-endpoint-mark all -- any any anywhere anywhere [goto] /* cali:WNHnGdgrUWvfYkdH */ mark match ! 0x0/0xffe00000 | |
| 6676 3427K RETURN all -- any cali+ anywhere anywhere /* cali:Up2wGMO6nRDp24b- */ | |
| 0 0 ACCEPT udp -- any any anywhere anywhere /* cali:QsE5fnM-jCO2_R_T */ /* Allow IPv4 VXLAN packets to other allowed hosts */ multiport dports 4789 ADDRTYPE match src-type LOCAL match-set cali40all-vxlan-net dst | |
| 292K 191M MARK all -- any any anywhere anywhere /* cali:y338Pv7g73V_m9Wq */ MARK and 0xffe4ffff | |
| 292K 191M cali-to-host-endpoint all -- any any anywhere anywhere /* cali:6tWiGowqka9jSA7w */ ! ctstate DNAT | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:2rC7tEofqr0eOMMq */ /* Host endpoint policy accepted packet. */ mark match 0x10000/0x10000 | |
| Chain cali-cidr-block (1 references) | |
| pkts bytes target prot opt in out source destination | |
| Chain cali-failsafe-in (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:wWFQM43tJU7wwnFZ */ multiport dports ssh | |
| 0 0 ACCEPT udp -- any any anywhere anywhere /* cali:LwNV--R8MjeUYacw */ multiport dports bootpc | |
| 0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:QOO5NUOqOSS1_Iw0 */ multiport dports bgp | |
| 0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:cwZWoBSwVeIAZmVN */ multiport dports 2379 | |
| 0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:7FbNXT91kugE_upR */ multiport dports 2380 | |
| 0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:8Ftbkk2dRH2eEeq1 */ multiport dports 5473 | |
| 0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:-JoRSaAQZPJAegMo */ multiport dports 6443 | |
| 0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:PUKij4Rn9njHfVTi */ multiport dports 6666 | |
| 0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:vSprVE-4rient0wc */ multiport dports ircd | |
| Chain cali-failsafe-out (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT udp -- any any anywhere anywhere /* cali:82hjfji-wChFhAqL */ multiport dports domain | |
| 0 0 ACCEPT udp -- any any anywhere anywhere /* cali:TNM3RfEjbNr72hgH */ multiport dports bootps | |
| 0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:ycxKitIl4u3dK0HR */ multiport dports bgp | |
| 0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:hxjEWyxdkXXkdvut */ multiport dports 2379 | |
| 0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:cA_GLtruuvG88KiO */ multiport dports 2380 | |
| 0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:ALz4foMyfue7vaqK */ multiport dports 5473 | |
| 0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:zvCXe1uOiQ8adzhn */ multiport dports 6443 | |
| 0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:Lppo9JuKR7AyZoWQ */ multiport dports 6666 | |
| 0 0 ACCEPT tcp -- any any anywhere anywhere /* cali:EoOkKdH0fekirfk8 */ multiport dports ircd | |
| Chain cali-fh-adummy0 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:KfSIATvjGaK4zGj1 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:9P1i-1Uq2VzBO2PV */ ctstate INVALID | |
| 0 0 cali-failsafe-in all -- any any anywhere anywhere /* cali:9fTcLBxw7RpWzYcn */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:FBSa7pCs1mUiQqM8 */ MARK and 0xfffcffff | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:bgWdKuewqYTMVuAZ */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:b4LLU1bG7O6XM_d- */ /* Drop if no profiles matched */ | |
| Chain cali-fh-adummy1 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:v4M9QFls4ZPiyZy7 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:3AmWDyZULYQY9GjN */ ctstate INVALID | |
| 0 0 cali-failsafe-in all -- any any anywhere anywhere /* cali:2dVDormZdB8Q6KsH */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:4rttKZJ47f19c54X */ MARK and 0xfffcffff | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:yVvuTmJ059apWZcX */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:jal6F2y8NERZT70w */ /* Drop if no profiles matched */ | |
| Chain cali-fhfw-adummy0 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:p6N3xKLkWCAfIBz7 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:SO8c1B0UTbPSuOJi */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:ecJjlnMA_3gt3VhD */ MARK and 0xfffcffff | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:u_FsQ3kZMBA2R1aA */ /* Allow forwarded traffic by default */ MARK or 0x10000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:ZQ7qVaUNIUtO9rA9 */ /* Return for accepted forward traffic */ | |
| Chain cali-fhfw-adummy1 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:iyFDpZ3GCaODXV8_ */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:R7ttpJi85eXZRhhh */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:mFNHOTYjHonv6NUc */ MARK and 0xfffcffff | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:v1NCCt3EkuqkogCs */ /* Allow forwarded traffic by default */ MARK or 0x10000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:-_4UngRn6sG-pB7C */ /* Return for accepted forward traffic */ | |
| Chain cali-forward-check (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 296K 192M RETURN all -- any any anywhere anywhere /* cali:Pbldlb4FaULvpdD8 */ ctstate RELATED,ESTABLISHED | |
| 0 0 cali-set-endpoint-mark tcp -- any any anywhere anywhere [goto] /* cali:ZD-6UxuUtGW-xtzg */ /* To kubernetes NodePort service */ multiport dports 30000:32767 match-set cali40this-host dst | |
| 0 0 cali-set-endpoint-mark udp -- any any anywhere anywhere [goto] /* cali:CbPfUajQ2bFVnDq4 */ /* To kubernetes NodePort service */ multiport dports 30000:32767 match-set cali40this-host dst | |
| 34 2460 cali-set-endpoint-mark all -- any any anywhere anywhere /* cali:jmhU0ODogX-Zfe5g */ /* To kubernetes service */ ! match-set cali40this-host dst | |
| Chain cali-forward-endpoint-mark (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-from-endpoint-mark all -- any any anywhere anywhere /* cali:VYFqh16JYiw3cgNB */ mark match ! 0x200000/0xffe00000 | |
| 0 0 cali-to-wl-dispatch all -- any cali+ anywhere anywhere /* cali:2lKRDazGTrGrCwLx */ | |
| 0 0 cali-to-hep-forward all -- any any anywhere anywhere /* cali:loGDq4znkQ2ypegW */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:KVrWUDPOw87B6a-K */ MARK and 0x1fffff | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:G-_uEKDzkg-3A3cw */ /* Policy explicitly accepted packet. */ mark match 0x10000/0x10000 | |
| Chain cali-from-endpoint-mark (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fw-cali0382da494f3 all -- any any anywhere anywhere [goto] /* cali:0ua1ErL75pK5ZtWD */ mark match 0x5b400000/0xffe00000 | |
| 0 0 cali-fw-cali0a13900be75 all -- any any anywhere anywhere [goto] /* cali:Ie0Be0fBonqG4ZGl */ mark match 0xc7a00000/0xffe00000 | |
| 0 0 cali-fw-cali1927ac942cc all -- any any anywhere anywhere [goto] /* cali:Um0t7KwazaaUbUE_ */ mark match 0xcc000000/0xffe00000 | |
| 0 0 cali-fw-cali1df5018ae1f all -- any any anywhere anywhere [goto] /* cali:5_0Ek0EafiB6mc8J */ mark match 0xf8000000/0xffe00000 | |
| 0 0 cali-fw-cali248c89b06ea all -- any any anywhere anywhere [goto] /* cali:DyFdm_zYzRY3Gz_M */ mark match 0x5400000/0xffe00000 | |
| 0 0 cali-fw-cali2bb77418da9 all -- any any anywhere anywhere [goto] /* cali:MYojpa0-ogtZHMeh */ mark match 0x14e00000/0xffe00000 | |
| 0 0 cali-fw-cali2f6a0c6b0c0 all -- any any anywhere anywhere [goto] /* cali:p4j-r7qH3eV0AaGs */ mark match 0x5e200000/0xffe00000 | |
| 0 0 cali-fw-cali2fe230144a3 all -- any any anywhere anywhere [goto] /* cali:9P4715cFH3cS2HvW */ mark match 0x31200000/0xffe00000 | |
| 0 0 cali-fw-cali364ce98f041 all -- any any anywhere anywhere [goto] /* cali:vImd6TEWgq8bxmpm */ mark match 0x5fa00000/0xffe00000 | |
| 0 0 cali-fw-cali36db3a7dbe1 all -- any any anywhere anywhere [goto] /* cali:AiVSnHJmVShvdJt_ */ mark match 0x15000000/0xffe00000 | |
| 0 0 cali-fw-cali38258924007 all -- any any anywhere anywhere [goto] /* cali:VDVouH_k7HJb_cyo */ mark match 0x7800000/0xffe00000 | |
| 0 0 cali-fw-cali3a70077d8c5 all -- any any anywhere anywhere [goto] /* cali:39RTmasXYTUXNjk7 */ mark match 0x9b400000/0xffe00000 | |
| 0 0 cali-fw-cali3c8b1c90f06 all -- any any anywhere anywhere [goto] /* cali:FVC6tzfAL8lzdSGN */ mark match 0xdd200000/0xffe00000 | |
| 0 0 cali-fw-cali4173d7d0a93 all -- any any anywhere anywhere [goto] /* cali:fuJ-I71J4B_zpX56 */ mark match 0x44200000/0xffe00000 | |
| 0 0 cali-fw-cali4c8ed377fe0 all -- any any anywhere anywhere [goto] /* cali:nz3fY2H2HO_WeS-T */ mark match 0xe6800000/0xffe00000 | |
| 0 0 cali-fw-cali53a298fdc89 all -- any any anywhere anywhere [goto] /* cali:rZ17o4uNObwhtKSC */ mark match 0xfec00000/0xffe00000 | |
| 0 0 cali-fw-cali54b1730f3e4 all -- any any anywhere anywhere [goto] /* cali:4kY0P2IsoS-ihOnJ */ mark match 0x9b000000/0xffe00000 | |
| 0 0 cali-fw-cali58424ecb876 all -- any any anywhere anywhere [goto] /* cali:gcoyIHpbSw1Uw4cm */ mark match 0x14400000/0xffe00000 | |
| 0 0 cali-fw-cali5a433393f21 all -- any any anywhere anywhere [goto] /* cali:ww5ki5BtVtZzHwlI */ mark match 0xbe800000/0xffe00000 | |
| 0 0 cali-fw-cali697b6656220 all -- any any anywhere anywhere [goto] /* cali:75PdnxGdJGkgZGHX */ mark match 0xce00000/0xffe00000 | |
| 0 0 cali-fw-cali701e7cc6c80 all -- any any anywhere anywhere [goto] /* cali:9qoULesF34h0PXu7 */ mark match 0x7a00000/0xffe00000 | |
| 0 0 cali-fw-cali71f32e5af89 all -- any any anywhere anywhere [goto] /* cali:bpvvMPzSV4OoWHqT */ mark match 0xfae00000/0xffe00000 | |
| 0 0 cali-fw-cali732acdb1f64 all -- any any anywhere anywhere [goto] /* cali:iAJG3ub7PGC-zzdq */ mark match 0x1ba00000/0xffe00000 | |
| 0 0 cali-fw-cali77878fe399a all -- any any anywhere anywhere [goto] /* cali:cXEinC306HTWFTU5 */ mark match 0x4dc00000/0xffe00000 | |
| 0 0 cali-fw-cali7c2f1aa20fb all -- any any anywhere anywhere [goto] /* cali:hEKqxJERCAOgxz66 */ mark match 0xfb000000/0xffe00000 | |
| 0 0 cali-fw-cali7f638ed56c0 all -- any any anywhere anywhere [goto] /* cali:YRDCuLLGdxXeNsh_ */ mark match 0xcf200000/0xffe00000 | |
| 0 0 cali-fw-cali81738822977 all -- any any anywhere anywhere [goto] /* cali:8Yyp8ebLpktlkuHG */ mark match 0x40c00000/0xffe00000 | |
| 0 0 cali-fw-cali82935ebf305 all -- any any anywhere anywhere [goto] /* cali:M7B3ktutkpQfJH6j */ mark match 0x5bc00000/0xffe00000 | |
| 0 0 cali-fw-cali87b4909dad4 all -- any any anywhere anywhere [goto] /* cali:mTZ8xzVJhgXVYc7q */ mark match 0xcdc00000/0xffe00000 | |
| 0 0 cali-fw-cali89012b27407 all -- any any anywhere anywhere [goto] /* cali:C5ZPvxdlXVAo9mS- */ mark match 0x58800000/0xffe00000 | |
| 0 0 cali-fw-cali992495da41b all -- any any anywhere anywhere [goto] /* cali:-gdVKfTF4kgC3fyY */ mark match 0x44000000/0xffe00000 | |
| 0 0 cali-fw-cali9cfc97f0efe all -- any any anywhere anywhere [goto] /* cali:80WWxofcUboTmbGJ */ mark match 0x81e00000/0xffe00000 | |
| 0 0 cali-fw-cali9d339d9a5ab all -- any any anywhere anywhere [goto] /* cali:j1aRBjWQk7h59rzM */ mark match 0xc8800000/0xffe00000 | |
| 0 0 cali-fw-cali9e00d61fdac all -- any any anywhere anywhere [goto] /* cali:iAtThDJo_80lJ-II */ mark match 0xbee00000/0xffe00000 | |
| 0 0 cali-fw-calia064cfc5be9 all -- any any anywhere anywhere [goto] /* cali:S634u0Kpo2Pz1V7n */ mark match 0xbdc00000/0xffe00000 | |
| 0 0 cali-fw-calia34ee2acd26 all -- any any anywhere anywhere [goto] /* cali:Fml2hK5lfmr2rbxU */ mark match 0x54800000/0xffe00000 | |
| 0 0 cali-fw-calia3a151b9de4 all -- any any anywhere anywhere [goto] /* cali:4GJt3Mevp3RQZjSp */ mark match 0xf8c00000/0xffe00000 | |
| 0 0 cali-fw-calia906e4bed45 all -- any any anywhere anywhere [goto] /* cali:zcAnQTAEjn2X94Un */ mark match 0x2ba00000/0xffe00000 | |
| 0 0 cali-fw-caliaf14a7e37b7 all -- any any anywhere anywhere [goto] /* cali:zy82AyYLBwJ99JF0 */ mark match 0x64000000/0xffe00000 | |
| 0 0 cali-fw-calib09e260b500 all -- any any anywhere anywhere [goto] /* cali:Kbw-cnGT-qghbZ0z */ mark match 0xb2e00000/0xffe00000 | |
| 0 0 cali-fw-calib66b16815ec all -- any any anywhere anywhere [goto] /* cali:VYtvaORZCFxs8d08 */ mark match 0x9b200000/0xffe00000 | |
| 0 0 cali-fw-calib90d52a5748 all -- any any anywhere anywhere [goto] /* cali:N211UZfkstA80JIt */ mark match 0x85e00000/0xffe00000 | |
| 0 0 cali-fw-calibe09b1f76bd all -- any any anywhere anywhere [goto] /* cali:j44NwHjGYIpuezf4 */ mark match 0x78000000/0xffe00000 | |
| 0 0 cali-fw-calic8ab04e10f2 all -- any any anywhere anywhere [goto] /* cali:7Wy30GXA-k3qM7j6 */ mark match 0x9400000/0xffe00000 | |
| 0 0 cali-fw-calice4755bda64 all -- any any anywhere anywhere [goto] /* cali:3-84IhvjGXe4Urb1 */ mark match 0x11c00000/0xffe00000 | |
| 0 0 cali-fw-calid028379b06c all -- any any anywhere anywhere [goto] /* cali:_ii2q_-oTZ5xIgcP */ mark match 0x2c00000/0xffe00000 | |
| 0 0 cali-fw-calid1a9e99aa3f all -- any any anywhere anywhere [goto] /* cali:7qGgc5AasujrvLCL */ mark match 0x80e00000/0xffe00000 | |
| 0 0 cali-fw-calid22063ed957 all -- any any anywhere anywhere [goto] /* cali:456pc8IIZ8Ls-mSn */ mark match 0x8c600000/0xffe00000 | |
| 0 0 cali-fw-calid71ef323b8e all -- any any anywhere anywhere [goto] /* cali:OUBYE3IY_WFiOdx4 */ mark match 0x76000000/0xffe00000 | |
| 0 0 cali-fw-calidbb100a25d7 all -- any any anywhere anywhere [goto] /* cali:VHaLEOFPVjD30wEf */ mark match 0xc7400000/0xffe00000 | |
| 0 0 cali-fw-calidd13186f4b4 all -- any any anywhere anywhere [goto] /* cali:-6hsletgyI8LTS2y */ mark match 0xfe600000/0xffe00000 | |
| 0 0 cali-fw-calie09028c913b all -- any any anywhere anywhere [goto] /* cali:FjOUcQfnxxzi57Ai */ mark match 0xca800000/0xffe00000 | |
| 0 0 cali-fw-calie9d827dd026 all -- any any anywhere anywhere [goto] /* cali:GaeQ7YpaPn8YhFVF */ mark match 0xb7a00000/0xffe00000 | |
| 0 0 cali-fw-calif1b9233c704 all -- any any anywhere anywhere [goto] /* cali:33EDOKd0boZYwwNe */ mark match 0x7bc00000/0xffe00000 | |
| 0 0 cali-fw-calif57467b0a4f all -- any any anywhere anywhere [goto] /* cali:9wBLxDnvGCk6EjSK */ mark match 0x4d800000/0xffe00000 | |
| 0 0 cali-fw-calif63fa556511 all -- any any anywhere anywhere [goto] /* cali:-ccK73PoFWfLNPaq */ mark match 0xc2600000/0xffe00000 | |
| 0 0 cali-fw-calif6838e0d7da all -- any any anywhere anywhere [goto] /* cali:HnNrRKHOPAhwtFHn */ mark match 0x53000000/0xffe00000 | |
| 0 0 cali-fw-califf10b72bf03 all -- any any anywhere anywhere [goto] /* cali:DcI7aQC_n_DV38pi */ mark match 0x1be00000/0xffe00000 | |
| 0 0 cali-fw-califf64fe2b1c6 all -- any any anywhere anywhere [goto] /* cali:EHezTELjz2qIfs9H */ mark match 0xcea00000/0xffe00000 | |
| 0 0 cali-fhfw-adummy0 all -- any any anywhere anywhere [goto] /* cali:DZ_jV3FcjfKXgFJl */ mark match 0xb9400000/0xffe00000 | |
| 0 0 cali-fhfw-adummy1 all -- any any anywhere anywhere [goto] /* cali:m6XpUjSxj7SiKNPT */ mark match 0xb9600000/0xffe00000 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:7cCGtzAObXcGI8W2 */ /* Unknown interface */ | |
| Chain cali-from-hep-forward (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fhfw-adummy0 all -- adummy0 any anywhere anywhere [goto] /* cali:3eo50-ATOyY6Op21 */ | |
| 0 0 cali-fhfw-adummy1 all -- adummy1 any anywhere anywhere [goto] /* cali:yVmmKwJIONKLuz2e */ | |
| Chain cali-from-host-endpoint (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fh-adummy0 all -- adummy0 any anywhere anywhere [goto] /* cali:PLVXS18J-4R5hCez */ | |
| 0 0 cali-fh-adummy1 all -- adummy1 any anywhere anywhere [goto] /* cali:LqC5YUnxEeLzdcAL */ | |
| Chain cali-from-wl-dispatch (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-from-wl-dispatch-0 all -- cali0+ any anywhere anywhere [goto] /* cali:eBnVcASLTvMFg9XV */ | |
| 182 14510 cali-from-wl-dispatch-1 all -- cali1+ any anywhere anywhere [goto] /* cali:MldUGW-Du40orI9- */ | |
| 0 0 cali-from-wl-dispatch-2 all -- cali2+ any anywhere anywhere [goto] /* cali:kTdzpLxGrgPwdaCE */ | |
| 0 0 cali-from-wl-dispatch-3 all -- cali3+ any anywhere anywhere [goto] /* cali:1wpgSoNgFrnUW5L_ */ | |
| 0 0 cali-from-wl-dispatch-4 all -- cali4+ any anywhere anywhere [goto] /* cali:C1kcCkbpZ9C-x7UN */ | |
| 546 57530 cali-from-wl-dispatch-5 all -- cali5+ any anywhere anywhere [goto] /* cali:-JggFlgCopDNNphU */ | |
| 0 0 cali-fw-cali697b6656220 all -- cali697b6656220 any anywhere anywhere [goto] /* cali:1-uDp5NJq594uTQR */ | |
| 0 0 cali-from-wl-dispatch-7 all -- cali7+ any anywhere anywhere [goto] /* cali:WVhNTjxPWj4akT3m */ | |
| 0 0 cali-from-wl-dispatch-8 all -- cali8+ any anywhere anywhere [goto] /* cali:SLoVQrys2EmFk6rQ */ | |
| 0 0 cali-from-wl-dispatch-9 all -- cali9+ any anywhere anywhere [goto] /* cali:5PkPZoYkJ4O6px1V */ | |
| 0 0 cali-from-wl-dispatch-a all -- calia+ any anywhere anywhere [goto] /* cali:kHoFofOJznjVka0W */ | |
| 12 624 cali-from-wl-dispatch-b all -- calib+ any anywhere anywhere [goto] /* cali:F5Tn_ar1NgqZp_Vf */ | |
| 0 0 cali-from-wl-dispatch-c all -- calic+ any anywhere anywhere [goto] /* cali:wMv4aHbQPOa9XGUp */ | |
| 322 174K cali-from-wl-dispatch-d all -- calid+ any anywhere anywhere [goto] /* cali:t0MxvCtNTHcZprt1 */ | |
| 0 0 cali-from-wl-dispatch-e all -- calie+ any anywhere anywhere [goto] /* cali:_IKKT2tjJfWuIXpb */ | |
| 107 16939 cali-from-wl-dispatch-f all -- calif+ any anywhere anywhere [goto] /* cali:ox0fqNZNSsdyyNx4 */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:inVTEiDwISFBK8sA */ /* Unknown interface */ | |
| Chain cali-from-wl-dispatch-0 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fw-cali0382da494f3 all -- cali0382da494f3 any anywhere anywhere [goto] /* cali:gJrTr0H1ryNzLy2J */ | |
| 0 0 cali-fw-cali0a13900be75 all -- cali0a13900be75 any anywhere anywhere [goto] /* cali:ppvuLeZbaZbzrWWv */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:POTw1h3fY9Se1DtP */ /* Unknown interface */ | |
| Chain cali-from-wl-dispatch-1 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 767 63395 cali-fw-cali1927ac942cc all -- cali1927ac942cc any anywhere anywhere [goto] /* cali:K5YdT_SSyUF6kdcs */ | |
| 0 0 cali-fw-cali1df5018ae1f all -- cali1df5018ae1f any anywhere anywhere [goto] /* cali:-LH06lgQ5fQ0TGGB */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:1rCbllCQWaiNRML5 */ /* Unknown interface */ | |
| Chain cali-from-wl-dispatch-2 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fw-cali248c89b06ea all -- cali248c89b06ea any anywhere anywhere [goto] /* cali:MAGpXr1oc-8eBrtq */ | |
| 0 0 cali-fw-cali2bb77418da9 all -- cali2bb77418da9 any anywhere anywhere [goto] /* cali:F6UWn4SxUqcSlKy7 */ | |
| 0 0 cali-fw-cali2f6a0c6b0c0 all -- cali2f6a0c6b0c0 any anywhere anywhere [goto] /* cali:zTeRNh5e5haaJx3V */ | |
| 0 0 cali-fw-cali2fe230144a3 all -- cali2fe230144a3 any anywhere anywhere [goto] /* cali:ew-uCf57OFZjsPS- */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:HJUzLW7i3rajudZC */ /* Unknown interface */ | |
| Chain cali-from-wl-dispatch-3 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fw-cali364ce98f041 all -- cali364ce98f041 any anywhere anywhere [goto] /* cali:DVONo0Crp2kUDUd7 */ | |
| 0 0 cali-fw-cali36db3a7dbe1 all -- cali36db3a7dbe1 any anywhere anywhere [goto] /* cali:kpQooGu7_pr051D8 */ | |
| 0 0 cali-fw-cali38258924007 all -- cali38258924007 any anywhere anywhere [goto] /* cali:2uhGP3RaMaewx4eF */ | |
| 0 0 cali-fw-cali3a70077d8c5 all -- cali3a70077d8c5 any anywhere anywhere [goto] /* cali:UyVyoGU82FJ4BGEv */ | |
| 0 0 cali-fw-cali3c8b1c90f06 all -- cali3c8b1c90f06 any anywhere anywhere [goto] /* cali:1hOz9cyqkx-b4afe */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:JAX27tm05vsA3Cux */ /* Unknown interface */ | |
| Chain cali-from-wl-dispatch-4 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fw-cali4173d7d0a93 all -- cali4173d7d0a93 any anywhere anywhere [goto] /* cali:3z3gFmqtRx8L_FyK */ | |
| 0 0 cali-fw-cali4c8ed377fe0 all -- cali4c8ed377fe0 any anywhere anywhere [goto] /* cali:AMV057FJP3JL12x9 */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:mI-JwbC6TENUk8u_ */ /* Unknown interface */ | |
| Chain cali-from-wl-dispatch-5 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 188 14929 cali-fw-cali53a298fdc89 all -- cali53a298fdc89 any anywhere anywhere [goto] /* cali:_c1r41My9438ynXz */ | |
| 0 0 cali-fw-cali54b1730f3e4 all -- cali54b1730f3e4 any anywhere anywhere [goto] /* cali:-54zabst0l-T9rgD */ | |
| 0 0 cali-fw-cali58424ecb876 all -- cali58424ecb876 any anywhere anywhere [goto] /* cali:mWRpCvAJ2xyEG1dz */ | |
| 440 48393 cali-fw-cali5a433393f21 all -- cali5a433393f21 any anywhere anywhere [goto] /* cali:73qrQhEoDlC1S8Rw */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:NpiyF_ijDHdzI2gy */ /* Unknown interface */ | |
| Chain cali-from-wl-dispatch-7 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fw-cali701e7cc6c80 all -- cali701e7cc6c80 any anywhere anywhere [goto] /* cali:ho3cxUKSJA-TP9q1 */ | |
| 0 0 cali-fw-cali71f32e5af89 all -- cali71f32e5af89 any anywhere anywhere [goto] /* cali:iqlM_IGBymGx30OW */ | |
| 0 0 cali-fw-cali732acdb1f64 all -- cali732acdb1f64 any anywhere anywhere [goto] /* cali:xGpDHN7jIjN35MOx */ | |
| 0 0 cali-fw-cali77878fe399a all -- cali77878fe399a any anywhere anywhere [goto] /* cali:mAiHCmO2SesRbtPb */ | |
| 0 0 cali-fw-cali7c2f1aa20fb all -- cali7c2f1aa20fb any anywhere anywhere [goto] /* cali:rr0EvTu3GiyXauum */ | |
| 0 0 cali-fw-cali7f638ed56c0 all -- cali7f638ed56c0 any anywhere anywhere [goto] /* cali:xVFtNJEylLWpKpxt */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:8Wui3DTvHMXfylz0 */ /* Unknown interface */ | |
| Chain cali-from-wl-dispatch-8 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fw-cali81738822977 all -- cali81738822977 any anywhere anywhere [goto] /* cali:IDJe2ecIVFf4r0wu */ | |
| 0 0 cali-fw-cali82935ebf305 all -- cali82935ebf305 any anywhere anywhere [goto] /* cali:swfUYxHRVWODcDK2 */ | |
| 0 0 cali-fw-cali87b4909dad4 all -- cali87b4909dad4 any anywhere anywhere [goto] /* cali:KO1TsRfdddwZ_feO */ | |
| 0 0 cali-fw-cali89012b27407 all -- cali89012b27407 any anywhere anywhere [goto] /* cali:x2yYud4EBAgQLX-e */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:g4rMBUOy3QqWaW3T */ /* Unknown interface */ | |
| Chain cali-from-wl-dispatch-9 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fw-cali992495da41b all -- cali992495da41b any anywhere anywhere [goto] /* cali:wVUeZvQGulEbu2ot */ | |
| 0 0 cali-fw-cali9cfc97f0efe all -- cali9cfc97f0efe any anywhere anywhere [goto] /* cali:Np17iUFYBYwBUS39 */ | |
| 0 0 cali-fw-cali9d339d9a5ab all -- cali9d339d9a5ab any anywhere anywhere [goto] /* cali:DUv2a68E1rr8ePv1 */ | |
| 0 0 cali-fw-cali9e00d61fdac all -- cali9e00d61fdac any anywhere anywhere [goto] /* cali:DytycrSkx6l3R729 */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:sQOWXeYoysKTk_Bq */ /* Unknown interface */ | |
| Chain cali-from-wl-dispatch-a (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fw-calia064cfc5be9 all -- calia064cfc5be9 any anywhere anywhere [goto] /* cali:drQ8TPqxNrPAJJL- */ | |
| 0 0 cali-fw-calia34ee2acd26 all -- calia34ee2acd26 any anywhere anywhere [goto] /* cali:4PEMOjdsGdcMusoP */ | |
| 0 0 cali-fw-calia3a151b9de4 all -- calia3a151b9de4 any anywhere anywhere [goto] /* cali:D3tF_6dpkjwmnY1z */ | |
| 0 0 cali-fw-calia906e4bed45 all -- calia906e4bed45 any anywhere anywhere [goto] /* cali:-ktq2Ed62sXVxACk */ | |
| 0 0 cali-fw-caliaf14a7e37b7 all -- caliaf14a7e37b7 any anywhere anywhere [goto] /* cali:o-ctK5WeGx-Ifglv */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:Bp3xP54yukFdK9TY */ /* Unknown interface */ | |
| Chain cali-from-wl-dispatch-b (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fw-calib09e260b500 all -- calib09e260b500 any anywhere anywhere [goto] /* cali:feeK90vikh5EAgBh */ | |
| 12 624 cali-fw-calib66b16815ec all -- calib66b16815ec any anywhere anywhere [goto] /* cali:BeU_y_OO7xuM_k6p */ | |
| 0 0 cali-fw-calib90d52a5748 all -- calib90d52a5748 any anywhere anywhere [goto] /* cali:NhRYcs6aa22tFfnb */ | |
| 0 0 cali-fw-calibe09b1f76bd all -- calibe09b1f76bd any anywhere anywhere [goto] /* cali:w0TBVb3uLqYsBOLn */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:CfglMUAqe1ma31GB */ /* Unknown interface */ | |
| Chain cali-from-wl-dispatch-c (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fw-calic8ab04e10f2 all -- calic8ab04e10f2 any anywhere anywhere [goto] /* cali:qFb6I6nRcWqVYdeC */ | |
| 0 0 cali-fw-calice4755bda64 all -- calice4755bda64 any anywhere anywhere [goto] /* cali:5m6ngh-lQ7DTACd5 */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:sQxTv6GHQ0Rn18Pj */ /* Unknown interface */ | |
| Chain cali-from-wl-dispatch-d (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fw-calid028379b06c all -- calid028379b06c any anywhere anywhere [goto] /* cali:8f1S-BLxJgYLxY1d */ | |
| 0 0 cali-fw-calid1a9e99aa3f all -- calid1a9e99aa3f any anywhere anywhere [goto] /* cali:-KqLxLjwtP-uBl95 */ | |
| 0 0 cali-fw-calid22063ed957 all -- calid22063ed957 any anywhere anywhere [goto] /* cali:a4_FEFHWHIr2OFwI */ | |
| 322 174K cali-fw-calid71ef323b8e all -- calid71ef323b8e any anywhere anywhere [goto] /* cali:Gbtlb-ZIitMB3QQu */ | |
| 0 0 cali-fw-calidbb100a25d7 all -- calidbb100a25d7 any anywhere anywhere [goto] /* cali:aXXuJSP5IWswZCnu */ | |
| 0 0 cali-fw-calidd13186f4b4 all -- calidd13186f4b4 any anywhere anywhere [goto] /* cali:3jnQw7Cw8Plgf9fw */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:6YutoE9b5__ucQ7v */ /* Unknown interface */ | |
| Chain cali-from-wl-dispatch-e (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fw-calie09028c913b all -- calie09028c913b any anywhere anywhere [goto] /* cali:PpYZjsES1eXP0NLq */ | |
| 0 0 cali-fw-calie9d827dd026 all -- calie9d827dd026 any anywhere anywhere [goto] /* cali:53-cqhhkwciJR2Ad */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:GIYVz8DozQo9oIxA */ /* Unknown interface */ | |
| Chain cali-from-wl-dispatch-f (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-fw-calif1b9233c704 all -- calif1b9233c704 any anywhere anywhere [goto] /* cali:V1oy9ociKZXhv9Yk */ | |
| 0 0 cali-fw-calif57467b0a4f all -- calif57467b0a4f any anywhere anywhere [goto] /* cali:UNBdg1XlDh2UGoWu */ | |
| 107 16939 cali-fw-calif63fa556511 all -- calif63fa556511 any anywhere anywhere [goto] /* cali:_7mJgqAgzpI3rPrQ */ | |
| 0 0 cali-fw-calif6838e0d7da all -- calif6838e0d7da any anywhere anywhere [goto] /* cali:zn3N8eIGQ2pnCZEO */ | |
| 0 0 cali-fw-califf10b72bf03 all -- califf10b72bf03 any anywhere anywhere [goto] /* cali:7_JoH_eHtWLUUm2K */ | |
| 0 0 cali-fw-califf64fe2b1c6 all -- califf64fe2b1c6 any anywhere anywhere [goto] /* cali:PpXou8oj7rJtfsPD */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:y60vElk2KbljG56r */ /* Unknown interface */ | |
| Chain cali-fw-cali0382da494f3 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:17P87MPEMSc6Uf2Y */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:r9GC5QGxUlz_5h6P */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:-v8kH4DYwSizyDvX */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:2rm-XiaccmC-x6go */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:yY4QrTpJ_FpKY5QK */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:mgPHGKqGxLB5frb3 */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:NpVV7fvIvlKeRGuz */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:kaAeCGIuOvi9or-N */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:V-GXFXSeeYC7JmCK */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:IQSqCwxeLbb8TtXz */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:Otd17EbKkarNmPRD */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:FfAMYwFncgVe4LNE */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:VwtKAhRxBkcF3xVX */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:vhVkJnul0sk8RZKL */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:tQ-iNb9QVNO5y9Hj */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:y-VTpvThJ9vllHjL */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali0a13900be75 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:HgLEj6hI6VepeWXR */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:-uUJQmLomL7Dl0Fb */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:yWYkRPyVqnnTpfio */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:86WQOXQhZcdxr0OZ */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:7d8DaFAjEbdgWRYf */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:yh1i1WhQA6plWkpy */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:zEFTW2q8GINnCnh0 */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:PiscpLZxt8T4297u */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:xjtn7UOeWBXxypcU */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:EU2HdL_QOT79M-oH */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:DBnKwPyTcRJaciAj */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:DSiBorkEjw8aRmcf */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:RSaRqxd3oPJbz0as */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:6eljshP6XKUJFaqJ */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:GCLWuXe_4JpNgU0K */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:j-qirrhiddb_A80i */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali1927ac942cc (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 809 68700 ACCEPT all -- any any anywhere anywhere /* cali:0lWnXEZ1EYQHFY82 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:ZTsBnBr2ezTN2JVJ */ ctstate INVALID | |
| 2 165 MARK all -- any any anywhere anywhere /* cali:RKbbaTbELQ0MaBpb */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:DSu36n3uKeN8LMmc */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:oJ1joC9FR6fh7iQ1 */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 2 165 cali-pro-kns.kube-system all -- any any anywhere anywhere /* cali:YthBfvVru5rhwhsg */ | |
| 2 165 RETURN all -- any any anywhere anywhere /* cali:x8TrfDZDnazwU3Bk */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:xY4_6VRLNjwhq0QM */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:T7HIxd6cLEl5DA6Z */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:_0wCOPgZViH7UDsM */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:j9FrjSvcR_LrqHIx */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali1df5018ae1f (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:NqTc1vvX-EnXLTS2 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:QPohrNipttLgbhlK */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:MCt21qKMiBaxJFfV */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:WoybpoS1KNclFPMS */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:M1uwhQoN61NrsQyY */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 cali-pro-kns.calico-system all -- any any anywhere anywhere /* cali:5djP1-fxksusdGXA */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:NRB4GTCjADsKjtCM */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-_ymJUz7yzI6NOKJhG2- all -- any any anywhere anywhere /* cali:zj2Qr0jCHHJMsghh */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:87upkvsnPVXKUneL */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:fl5QW4stlJo9bAs9 */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:qK1gH2IyTCUeHNHq */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali248c89b06ea (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:xKxT8SXDSKQmJrTk */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:f-1hxDcJYK9wBDxU */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:XgFmL1aqKLMCG6a8 */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:dLikKXL2NdNBBp3L */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:EC9hic6cTcMG4eO0 */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:kLeM1a6roT7GCRi0 */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:mkgrUwQj8ZqO4ojH */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:gyXRn6oPs41HSHv_ */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:DxvJb133_wwje_nv */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:YLCwqknFVQGdIVPB */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:OmZWgWyogGzWvuWv */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:ENr7OiVyAm2JKY5e */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:xzW_V0ibyJMrYXYq */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:oVUHR44y_Vc1UBBI */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:WISh-GEVTFtyxWaa */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:LDj9F6bwE8K-45rq */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali2bb77418da9 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:ysPXnrqt5sxW5gF6 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:k2fS4cMbWMspW3hH */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:odtHPAXOCw0lFWOw */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:zWlvOKPhFHh1WBF8 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:pUZEGgFvmynaQZ9c */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:sG0CFe6IjxTyoHEZ */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:k3wXdDJyjjgkgCk0 */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:LvbgVpynN2kcY4-o */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:Lae1NqKB0pgTJNn5 */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:ATNBWNjUGhIj3Lr8 */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:oCWdbDKdLbAQI1RC */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:cp4KqoFSHvbqoR-- */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:ESNkPULGao0IzDWe */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:lqRGhColBsgLKHKu */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:tg2vHmbvSdfXam8Q */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:cB8ZrjR_FtnhWFOc */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali2f6a0c6b0c0 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:uhwZpLsWZUMSPNJY */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:c3UcAf-9kH12ZReO */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:XUS4u0EG0QYsTFMu */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:R-HyINGbnoWS-mur */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:hol9LdksdW-ZssFs */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:4ktz1gjJSptr5gb- */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:JS2kKQs5M7TPzWfP */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Qlcf5LQ98IylGyon */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:uCGl3WqivnlktfBg */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:55HRN9xpz8LH_ZJZ */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:OVeNsNk4EPvXMNme */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:joJN7gSRMxMVGLcj */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:xqN1WaNvENY1tQ_M */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:sBji4lbBOi55bLQU */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:OlRo5DI1BYdbFdLe */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:rxsmw4J5bWprT8xG */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali2fe230144a3 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:ZEn9HODSPQFtJLdh */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:hZorbto3fLuDdolZ */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:_cemB575exx5TnWL */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:ACi40aI0DCwl2zvi */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:r-Qesi6JysSgwgL7 */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:6cDe5oTCNStysHAW */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:_qsi3sYyIC7Q_Ct6 */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:tqtvbGn_A29S2etw */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:O4aFiDMClkQUqUfn */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:GogmIvtkbv-u5Dcg */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:7li1fxLaCI2BUR2g */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Xw9ofTuxzhppJZ_- */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:2a-rLmQoQASHnqa_ */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:lVD4Q19iYNHBKXw0 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:8aT_pMNlyHJ3asUT */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:Xv-mC7ZhudL0PqR- */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali364ce98f041 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:jbIr_DPQ0i1sNkPF */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:HTTdf_Xwr3YUdpXC */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:XeVlV15l-hn5IOBW */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:x08iXvZISWXUo9C0 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:C-QHOpD1cipUwbR7 */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:_vDgyz07f8R9Uqu7 */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:yzzAwk6StsAjZK2C */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:sdK2dw-nZI7WpOAh */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:qHTVl9duZVkcJpEu */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:PEOskz48CXPN63MR */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:vS6A9wi6HdmpkgK6 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:DXlvSpPB2czg4kmu */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:kPMSAr9NY2CFBlub */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:fXuKo0filhNwuhhI */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:W0pOQK3KQLyPBI7g */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:jo0wm_QdR-Pe6WXv */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali36db3a7dbe1 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:0QmhdOFytkdTnedO */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:U5VxPrl9kanFQOSv */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:9NgAu7ttj0evXQRF */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:Wdm2SOHPm8KEmkF4 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:apO9wFwU5h2X9ZAB */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:nl6Zb3KnhMCkoS99 */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:lJOHj2a5f_SnN6AQ */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:5hx79ZoLKH3RosRC */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:TW8tGs-cLiDZtae5 */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:xitcj7uhan4pAmwd */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:l2p2fvypBqepeIbf */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:17aWaV_vXBRNU-Fy */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:WssulMFnX6lhCe7O */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:AsSNSxXUV4a-XZ8J */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:6sjM04WBHyrzrO-U */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:M4sPbFfuxdMwkm50 */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali38258924007 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:4nFzQCQjs3-YT9sl */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:qcDGFtTM2CgbhX0w */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:D0GaOh5T2P2jbbDV */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:MmyhdNGbSBcmoIIZ */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:j03zrxWk-w0DanpQ */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:SELDygqr6jVqWMuM */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:TTvenIepPFlmoX3R */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:HgtqRj5KwYluXCJ3 */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:nWqhoUCw0awdfsLI */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:qtlo97a56xJqQKU- */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:g0lrWT7RAaoFvXe7 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:4AKzdUsCV8aAoF8s */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:kuOXTjAp2XPqNi2w */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:8_Io4FVN7zCdZ7qq */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:hJp_WXdh2ZvCwVuS */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:U-tAQ60d__q9bAmZ */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali3a70077d8c5 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:v6Cx7JMe1AeBA4x7 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:99iV3vKXMsZ2Otlh */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:JCfB38udZQcc09vw */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:MI66tHYcmk3Jzqqe */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:PS1Pp6ly488TcrLV */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:oM2syzwClAosAJ59 */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:RwRo_OsOjk6olxlw */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:FmcMYFTi_zMF0Oxp */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:jgHC6-514_wnXdpH */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:1Ne2htgq1ER1V96P */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:oEBefRIbMoDsrudD */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:FC2paBRMHh7VSjLr */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:rx0f2AFQRKlTUxtb */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:kvIN0gTZij4LoKac */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:Nvr0W9LQatL41BRN */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:wUNFTZpOPSrJmCYv */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali3c8b1c90f06 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:IgfvmV3SY55v_iXw */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:0XVxbqER40299T1k */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:oAVvMFWUOzeSVNf1 */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:bTQY80AcgcgqPriN */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:OhigCNgYRevgGt-Y */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:Q98E7BqTP95YLyQI */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:o_HdF38ZnqqMzZwQ */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:YrRchRxcmQ-gjAzk */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:8MlNxxmgAhe31iJy */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:KNs7cAfAWcqmffK0 */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:5MS18BRL8D5v4gxe */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:HhsyFpfIKYBcI8sI */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:66kDHNJwoInB_d5X */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:tEzr-0s-gBZAShrG */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:FKer9IiCcrHYwSGq */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:z8IrvtQq4UMZkxBj */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali4173d7d0a93 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:j4v_UbTYX6rUxzI1 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:9nj5Sho2kgQ3zjxy */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:ja16rvVEQZDnH_J5 */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:M9aEw5SRHrfpzWcq */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:sg7YOym5OUKMvFcp */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:LM_pQIlpAOmDxsb7 */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:ytYi7ReO60SUWpWw */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:1E820ngDqpenYRD3 */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:GEkYK5OfqIAt2Be0 */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:iyJpgF3x1xXDVx_4 */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:00Ay_jmTkXUqgfXT */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:3FVHnKJsL0nBwkFi */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:RWM2J68ecVugqqjl */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:0Bl2ohc7Pn4lxWzw */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:ejCmUPygvttHaP1x */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:kIF-fpY4qGw_Q6zg */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali4c8ed377fe0 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:YAl14b9c9HV6OA6B */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:fw1YLzSqBMH4FIiX */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:kY0TNAv3Hi3dCHif */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:SYm7_-jrcipeDtRu */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:5hJenCAhboWDnZ6i */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:bR6bx5Cq5I0h28Jb */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:oUODM1kalisreXN0 */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:spTa7wtA6KTggT4l */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:jo2CTe6zi3TkAoCs */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:v9aUsfu7-xIvZL1c */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:fjqtHxGglhvXnIX4 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:JaWjcZKXr-4rgSE9 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:1mkCIQ9zMrdcWJxB */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:zi3GWF9DmoePwDDe */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:gLFm6JV8dqEBVGuu */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:gFjxivD19j4d4T1_ */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali53a298fdc89 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 845 72389 ACCEPT all -- any any anywhere anywhere /* cali:Meu-ffNCSTdXPS_- */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:s7hyZewhNKsy146K */ ctstate INVALID | |
| 6 549 MARK all -- any any anywhere anywhere /* cali:17ktwiMHthhfX6nk */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:nHVPTlSemgWuCiZb */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:z5W5sPzTUupsT5UF */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 6 549 cali-pro-kns.kube-system all -- any any anywhere anywhere /* cali:up9jg9tkrKyqkfIE */ | |
| 6 549 RETURN all -- any any anywhere anywhere /* cali:p25LY69uIHe3zwdZ */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:3lQclKlSwZ_-hJTZ */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:RNwt4n-v2-qKNHUP */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:IiON-GH1_yQA0MCp */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:bbMDXZIho5ogi0_e */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali54b1730f3e4 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:iU-j3q5rHy3_E7dm */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:BPNcPYmChKu3t9n_ */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:zxdg7wD8WixO_KhG */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:zJM02xoMN0pARqIX */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:76NzIiDpgn0D779N */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:m6emLMEDp8P8uZFg */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:5esDup7h_ebHSV15 */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Bt6_SbvDyuVo_DyX */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:pPPBRP5k036fQPhI */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:qRBFKh1w5k-h8Z3a */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:gav9ikRUGi1ZBf3j */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:9iIIevbtArWImiLw */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:2TUdeytxuepTgFle */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:3D2wmce8mkOeVpLM */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:RO_dzSCuN51IutEe */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:aulP9rV5Sl7pT6DS */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali58424ecb876 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:al7lFg2eA8mMX2tn */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:_OkgtpD-4Nmyrw3q */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:YXfspvAjtFVBOM17 */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:Awbk2h_sRDb-7QAO */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:OkNk7nIC6PkoQRL3 */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:jDK-fN4VFU0IOHuE */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:-35m_HiNa573D6s0 */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:GWa2K27-FtZjwVBJ */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:27SIe3ON7vCkRPvP */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:AoQteQkUmUohpdwZ */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:x3oXbkfiB7I15AsN */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:_QRBHn9dXaM9z6-W */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:WTwTlJ9g3oeMbOAI */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:RnNQRBdynpb6qsa0 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:xxJa2O0IxTWGJs5r */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:OvgzpDYw0QPJmfY5 */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali5a433393f21 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 1808 206K ACCEPT all -- any any anywhere anywhere /* cali:H7iOSUyi9LwYqqE4 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:nI6m1TxzdFeSCFDn */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:Mi3-Y7iRU13qlR9I */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:GHVeW2cuv1kslokK */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:v1bpLbi9L6jFyNVw */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 cali-pro-kns.calico-system all -- any any anywhere anywhere /* cali:czevP52-tewm6DJW */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:wDSFM_re2jGIGgiV */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-_nzzjLvInId1gPHmQz_ all -- any any anywhere anywhere /* cali:09Su_ZnLGd6eKT3t */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:xJ8umt1ejyqblqae */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:fBwoFohkkOOAzSY1 */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:wF5g_pcLxosSbH2A */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali697b6656220 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:81lq0R-IGnHfs4La */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:CRbj3S3A80-UGl7Y */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:Dp-N1ynAMlAYp1MU */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:s9Jzds6qrXMySYNt */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:bvvey7uAHBWvqsX2 */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:rIXumtUNdDIOdU29 */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:72mYRaNRuy_IYQn6 */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:F8OESn7S7zevQql6 */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:-5F1Q8qr6dWSe1Qq */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:QyWX8vRocy96gSWr */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:oQklykURZ8JryCIC */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:NFziPUecmWfvLdOd */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:a8hSu9Sw3MJ5a5Zk */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:SPKYeLC-Eb_jxAlK */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:ctIm4TIc6vQRgx_9 */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:q-WSDbjt36Lm4EFY */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali701e7cc6c80 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:tTFsQ6gnLAkGMaNE */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:wLzclrhqL8YrInAU */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:9yp_Q0fV5nVV32ku */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:nE31_x9mHJOHajDn */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:IAfPzKemy_Gzcu96 */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:_qaqjftDnGwESn3m */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:FSavVi8pfllTz_-y */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:hwQdmFwScrTPg4mU */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:uHTK_0IhAJyPJ-kv */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:TO3oyPJAPWI8JUg_ */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:CgXZVsdDFZmqq5ZB */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:p-QIpyIpGXl0NBZF */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:kvKuo8H40N-G2QG8 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:xqkquRVQktafBd5L */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:zSqfFWO79bAxIVo1 */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:R8lKz11tItqH6pYI */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali71f32e5af89 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:578NHE3T8ehGhVh_ */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:w-4sJrxB30QHRYc_ */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:d9517WeHvK0V2iGK */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:0pKYtEH3DCpelb3Y */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:0nvlZlwv4c3VPz76 */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:4etKl-VQXhwDrAFv */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:lv3fixgsgOy50nxu */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:RfRxSpo4aGLaaUnp */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:m3VNvIvhiIaiCuAt */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:RL6ZFr1jQwxFlV16 */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:L6ABeAgmFhAvATX5 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:4enlX_LJRw4w9e6U */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:J1kwtKuwZugcn6pW */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:1aMqKlKv70vKabPE */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:m3-Dyb6VuG6D3geL */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:QRs80_HhPBFPJNxK */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali732acdb1f64 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:w5gJ0JaBvoq5k7JW */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:5Fc4XSMZHP3PV1sQ */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:Ls8jC5-XnA8UOurG */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:UHQeq3-XCSNSxHK_ */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:1QwndcEmDt8fraA2 */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:v8ra9CmLahIsXPt2 */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:Z0Bia2Xd87MNBevU */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:tPOsDsFV9w_sTWM6 */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:lpbarJWY8Iw8pcf3 */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:YkayQqZ82Io3e9L4 */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:cJr4fmxp5lDcvCsF */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:AKhjnG-v2K58nxLB */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:0C3GL4F1aSt0M33A */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:cTC3cpSPb3be-nbC */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:V3TTsmpw_fPJ3eoB */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:s3-J5duCjhkBDU4e */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali77878fe399a (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:RgfH4F6OzJEaRl3g */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:KPG0p8WlYCqypv_6 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:p0AV-uocAXfVwWJD */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:ew1B1nuubw6bDmDD */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:QhMdIIza0gQ3OhxR */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:TCIVA04kYcS2NZhx */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:n_FPViB8rCg_XGP5 */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:ONWtirsIEndfDXSs */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:8kDRTH7157ERTOsD */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:HL6QQXYRxtsqFN0F */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:s9SWtDedLQ2rHUhY */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:ACVlDOIMvm05P-9x */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:AMkn-7VWTKJbgOzA */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:KoMM0Iy202En3p8U */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:D-A-rcnwZ9-V-ykh */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:tcEWu0poPzc1-RIo */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali7c2f1aa20fb (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:zH_AjrIAgwibq1Dm */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:0bMY1gPrVDp_7zXu */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:9apTZKIjMdK_ovsR */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:hbSYdQQOQX7-yLRC */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:AN_TLwcquyCDFCH2 */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:sTnv0DDW-BsH5TWF */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:9Ya_TQteNZnk4Iqa */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:WPxRugeKeX_iP-fi */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:1K2NeIa0oLDmHxfQ */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:vmkmp50IgMSDeLbf */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:9qLC7p0mxDC_luKA */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:0v6nScUt5gukt8-j */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:zY-sQgW4QjxJSxnq */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:AydIxxhyFyMVin5f */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:HTKG6BARSCpnwF8N */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:T4S6MvmV77OJhD26 */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali7f638ed56c0 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:Pp9x9qsZlo4UTSR9 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:LKyQvruVJL8Ew-Jb */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:t_bpE_Vs6aWPMBkH */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:mJZKwiqB19QTkVMH */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:wG0PfriUxdsnPxwB */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:YPHStsv_LMFjSNTz */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:6I4P8B1eH0Sw7NFO */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:j2g0nUKOkOfUXSdi */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:vg3MYcx9stGtZc0Y */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:uXvEv4wmLyo5qU8l */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:c7vNPcqt1AzgWdGH */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:PJdCkjMoUUk5xWNF */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:oANVAj5Z1vSovd6K */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:TF0uAMwG6ekEvddo */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:nt5iauF9L5TsodiB */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:um9QAwtblSgINUOS */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali81738822977 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:D0KsCykMsf5_maSn */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:_Vd8rgI4smDewSMe */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:Qa6xsSehBkxVXYpE */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:5N3-DlZOgq-Q96sy */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:lVOmYFaq0WghxQRj */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:ReDObYN5TRobgOEi */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:Pl-_eLSJmYCWx74C */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:n9LjFFg9PAIDoq-a */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:bYQuucvRJAuWNgFY */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:xuuq_1Nw_GAqgOh9 */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:sfLdlmoSu7bZ7RNC */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:rPM7ojakZazmdZeX */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:IMMGYihRJjgH_ebH */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Mc_D02LBIOb94iXB */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:Idwm0zHfq2-Znxq4 */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:ka67l6AOHiDsQetg */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali82935ebf305 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:KokJfvUDfdJ98_A7 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:HT5wREPLYGZOsnoM */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:ALQRFM8QGqVyRbEd */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:C6wdNeVzbmQuRCx- */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:evU1Z6HuDjJabQlh */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:bLrXJ1mXzOvUyoKi */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:NdazYKMnYp9QOE0W */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:iD0OWpsTS9EjZpxD */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:fvLOpObaO5_ENA2e */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:IIlgZ97QtzB0ASHX */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:RJyvo8IzGKiazmFf */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:CMQtVP-674mekR3d */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:GqhQ5XmyAFksT0Ea */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:4cdlW9ZeLB0eYcUa */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:-5eRTHTXrdlCasie */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:xOJPEbTX8b3ze3Yf */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali87b4909dad4 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:qWsNTtjCODKp6oW5 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:IFxbUpTybqABJdD3 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:QnNTrS_0VuPbiPG4 */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:LyOtGmWkLQ-AbxLl */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:cVtU6ryjNplB9ZIf */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:PqFVzOXKkdUCZJPt */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:81wNNPMY78BomL8O */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:XINs4rVDXXMWiUXz */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:M78HJcu2M3Rbnlv0 */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:NH5nSRrrvBkDe8zr */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:ggH9lZCTHK0UEP_S */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:YZsdHszhnEPbfF_7 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:EHmDyzwYGRnzlW9q */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:YdI6vaFMuu23k0Fe */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:YHUqKuw5nso_hBP9 */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:BG7A1jdTfnVlsfy3 */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali89012b27407 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:GSfusD-uFpOAhTzr */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:FxrnhYF-wr3OvZPG */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:Ny2UjtyihKO1-Fw5 */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:WOpui9vB1Ke4jehB */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:Uwj8GwyUIlBPypLW */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:hDM7i_Z0nUw_TSrr */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:HJPWYcvFdQWPw20q */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:kjBrdF6YM6GVRBSl */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:5OEdDVxFcZO67XsV */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:7R96fLOdQINGiucI */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:LOM531fUeIoUlt51 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:JICROhXRHH72BrVg */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:G6hnCUqD9fheLZD9 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:3ywa8cJnZZOKQsvH */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:sgkDuaYjglxXjj5H */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:cnunAum-Dry_4Ks6 */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali992495da41b (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:bJ-d7feIUnWjMbdt */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:yw3tWqdFr9CBb8My */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:4RAYXLRKWmLAtx4k */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:tx9GA4psvFXmI3nN */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:y3thqL95ltTEI8dR */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:1_mXdnzPFMc8QcCK */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:rXVwUH53FwEE_M1L */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:9Iu4Pes3bzowrFXe */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:TVQ9q5U53g_3IHiR */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:sy4eM2axv5wj4X5o */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:_AnuBlw6NbmwGbTs */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:gHIFkdvPeS7YPgOh */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:QEDcrAo97FpI6HWZ */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:IM60xz8ymVG3BzjP */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:U464YsByGgyu8PTz */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:JSIHR8vi1d_DfixK */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali9cfc97f0efe (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:caZuaF7_NQfBW9LB */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:cM3LrCS4ckxZiYrO */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:rogjVUXYRAu_Oenu */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:rc2CqvJ58Rzx-GGJ */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:PuBEsd4aAZotzOhp */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:LN8aaplHOcFlp8KB */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:-tTcEX9duW1gxm9- */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:xZkcWZuv9QubuP_i */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:rRnS3vRcVh2-2HzB */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:GPOmaYrzCJxFdoz3 */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:-pB0H4letuFo8SSe */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:nr_lASHG52D5IerE */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:vxErgLxE8eRJcikC */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Y4t0kH8aF3lZnTOM */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:kP19iR_UupUENKWp */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:gfQgEaYLl6oSaWFq */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali9d339d9a5ab (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:1JHgWujNE62VNRHB */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:vpNazyQv0fotAg0C */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:jJgxyerQBoL3DPoG */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:qv3Et2drrb_0TxJx */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:NGh8LW7hET-IHhJK */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:uPLm4b2L8s74YTp8 */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:dBUrZZupqd06bONV */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:EXu8z8f3vX-xWSPY */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:6bLDapcKeiMCQlTG */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:mhrIEzkno2q07yNX */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:ujFAHSQ1Wjbrj5o9 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:JR9mKR6Z2BdHwA3A */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:c7t1Twj-nwQUOAEd */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:FMYOaYrhwxWmc7Nq */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:zZpOquaEY8EftrUg */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:mgkFqGDmZyhOHuey */ /* Drop if no profiles matched */ | |
| Chain cali-fw-cali9e00d61fdac (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:gED9qROYGSuxBiHO */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:gRKvEpPOaB2JMgbX */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:caZ6uDQiWW83Jjjt */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:Jil-lPE3n_wTaJGI */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:0aKEDdM4NSnwA1jv */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:HNpSDf_vtSH2Ax8L */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:JW6sgN10vRLBEge2 */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:im8gOk8JuYKbGeix */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:cgBTkNJpRS8Xdu8L */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:nOVoFbcFyiAwoaSu */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:aibUxpFFShHeFpta */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:fKhulhGyNb4tTjou */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:CiOtKHuz86ycNijG */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:W_sQ40YPIbluaFPh */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:tN98vUMcOGvpbVzF */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:pFDdJz99G5p7T_sw */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calia064cfc5be9 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:RW0CcgEYprN48l1f */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:dtHlXkwIqGPW1gJz */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:zCv3KOz5hWp4QP0K */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:Ah8W6oALSfNZESMv */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:HAQ-M265OCdyZT7M */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:qn3rRfLlKYcbsb5L */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:8m80_7AI7qRs6dQZ */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:t161IcyNd4_2o8ri */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:ashDBb6_TBIk143j */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:8A-TQn8hHpHNqgHo */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:_CC1Vu4SzhT2AYWn */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:brto1R6jyfiZCueB */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:4QgvI3cdiq3X95Q1 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:7w2ERoPuAWWXG-hQ */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:BI80rGXrGNipu23R */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:AKhWQRPCFyymXH2Z */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calia34ee2acd26 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:vcHPKyt-Q4JuNqe9 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:PukTfhqyKe8z5WZB */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:YOmC4H7kRLk89cAe */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:XUK3wZMNSmFPsqqL */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:CDuvFuDeNBm4GIWo */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:rp1LA6OFUqjXNpML */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:kbbsULSz6KkyltHQ */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:tKF-AUB7t2cSJwPe */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:CAhsFV_h1_6aQqqs */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:ejw8UUxeITrGXia4 */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:jSKZD1NIy30mCKZ0 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:lvSTcxx7oQtw3KYh */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:K4rab5S3zoY-8Mqn */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:DbB-h2rIEUAR67M_ */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:oZbnIPGN7K4u3cRc */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:KkLKsfZYvq6HJOIA */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calia3a151b9de4 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:UvLjP3a6Gvdp3HCO */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:GLtom4kvw13Dd9sd */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:oDbjABsI0AzU5pK4 */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:mXBb4an7BPu5_ww6 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:AUS9dp4IViDWMUxq */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:PqPww-39VdQjzMRP */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:-Ow9EWuwCwLFamcS */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:kyRM_aqdzHvt8Tj_ */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:dLFsItdBm29wmSTc */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:5FzbPNKWS7IiEZTW */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:CfFJN-2pzn60Owdt */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Je59R2I1WUMT2wcU */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:dL4PCPtequSUJCEw */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Pdf-Tcblirid2Yt8 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:trAkF7kyfi3aQOYx */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:rcpyq7L9gPRfMQPS */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calia906e4bed45 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:HX1o1gL5UlBKyN3b */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:1jzl66SiW8Vk9Z8R */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:DJzA4_Lx6JBzttBW */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:kcNn8igrU1e7RowP */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:IGNgAA8pvoOmlOre */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:dRaipTbvSi8ijwoc */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:mCUDPPsNm-nKZUZL */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:zNQTRKeggOhnsI1x */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:fE-CIzr5LmnPC2NR */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:-zwhYJXwXMdU4m9I */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:EGBCbftY1Wk386IN */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:DnsRVpvnEADuDL2e */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:-hsgoto_XP65jAtE */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:gw_bbNsUD0jBFzYM */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:p5po6CiUKTDLCgr8 */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:fLyLPiyvJWpNP4sl */ /* Drop if no profiles matched */ | |
| Chain cali-fw-caliaf14a7e37b7 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:nz-hGtvVSt-es7Jv */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:9q52ld5z-sLerzRE */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:PZ9BXWwUXgIVQErq */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:15x79b9rspg4CvML */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:cIOnShbb446JPB2J */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:wfVbrv1jQqmrh8FJ */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:ogDdsp8ZNMmjagvw */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:egSi3loSVqmWMG1H */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:6TucqZBUV-k4cDVc */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:-jtxuB6cLuBWIWTm */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:t0aqb03sJya9Bo3Y */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:pnRnsiJYtb9lhRrQ */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:szuvDdklOhoHuRAV */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:UnsrU12s3ouGEDes */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:ywSxxGKmZuCJ0jp0 */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:AC9m_vxxbR-NZgXT */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calib09e260b500 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:dHwJFHTEO-T322Bz */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:eeV8QXAYikV4PjH4 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:7ITvcvoGUBWaadpG */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:BMn3UtWQuxnhhEbj */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:KaZza2S4HcwFCX4l */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:mAV5xUbR8CX3t_9U */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_YYnSgB46MA1TYU44kJq all -- any any anywhere anywhere /* cali:mKIzViEfzGEvqjkF */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:VrrDjOVscyOv5Ciw */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:6uwFM8EWJWhJguXH */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:4uJW_p4p5erExxSP */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.calico-system all -- any any anywhere anywhere /* cali:d_29yVaWn6MotVD4 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:H8qM7jkA7PzGC2Ou */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-_jtt6i-KVVwZ-74H4ov all -- any any anywhere anywhere /* cali:kfCdrn-SvdKiasJF */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:xrRrwQWiuJAxCKUk */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:Y8ganH_ThOzC-9y9 */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:uC0rgS_yItZOIyoy */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calib66b16815ec (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 118 14656 ACCEPT all -- any any anywhere anywhere /* cali:jhfQU2Y7A7IReJHA */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:AN0837Lt_uvtjstc */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:KVKRRli3TCUhig2g */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:i8pf7bnOQww0NfsI */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:fGM7ArS3gg3p0Gtj */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 cali-pro-kns.calico-system all -- any any anywhere anywhere /* cali:8207_mGvHUvnW8bN */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:uKzfVDQGn-7Vu_6V */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-_eY4Bnp6m80Op5FOwqd all -- any any anywhere anywhere /* cali:gmyOEJZlLoqdskyp */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:LEMfXnEjvPTsMCjw */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:Njq16jM0gguXdkHk */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:S4gjzKPTRAMhCFAw */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calib90d52a5748 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:4aQ_w0yMxbvs2HIh */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:uj0tyh8rKC6tB27l */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:L6wdT0Rt83gKoc_G */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:R5HCs5_iZImvfwFE */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:NgwYNg5kEhSXfdmA */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:lZUPLHE1RFecZjLB */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:RZWC7cVXICU_nYBF */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:JBSYh6xzXJiikFKx */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:ttW5_PPohL_jyXRp */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:G_vPbwviemRRgIpD */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:eYUKlvxHGScNRbhK */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:RB3k-A_Rg0FNOPdX */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:UrRdPMokGLVpratJ */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:A5284jme0t_3CdQs */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:1tV6kIp0qJHPkUwS */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:0MnfJBmtH0gPwAn2 */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calibe09b1f76bd (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:k9i92Hywxyr_xPf8 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:yBTRUx0-n38-Cla8 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:FGfdKbGpLoLiTiOA */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:Ep-iTt7SGB5sKXR3 */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:wjsdziMG2HjjYvkX */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:o5z-vAamR_Z7Jgql */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:nUjltqi23__JV43V */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:JtNrmflg85DJHjhK */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:hPmTHSJ6mKvbIOoK */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:PtwfVDAe9_ks6zp4 */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:I5_lysvD_X4aeFrI */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:xj53yaEraFhMACmS */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:-E9UjI_rbpH6CMIB */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:S75oLBY67CHtUEYm */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:i3KA0T-t6W59-pyF */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:4Ekfgs-iQitQBB6v */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calic8ab04e10f2 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:4yS3sRY65IN9PPhB */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:FCFlpaGgzXzIWNMI */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:eXEseNE-gzwtRVad */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:iI7Am1jLlKNnZO9u */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:2q2_G9ciyjNkzIYy */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:kJrDo0q6AL_HGAUm */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:Fb658YAyhN8lhyKe */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:gYHAImzOzJTdWUnT */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:G9IYfFS0ot98qXhF */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:zBwo-8mu_eV73ceZ */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:W81N1nyGz7BJO7b3 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:4ktt9zr_BCCOJ5RV */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:M3dOy7PTXRZ24nDY */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:U3vGOKQrwuQK4zLd */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:MUldqjM8Aw6uuiK0 */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:ZXjWlft3tBRp6jLP */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calice4755bda64 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:W0mFIy1FHfDjcrFA */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:euaK4e8jiUimb2PO */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:MyiseaFtQhVWYK6H */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:xNvlItvm065SwLRi */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:piIL_faw1icsgUIF */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:LUQnWV63dD09gtfv */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:WuMYwfJYwdpCadmp */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:POiKgEdqoP9UxFbg */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:relW0a0YEyxNucoW */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:01r_IoEDAUvXaSc8 */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:Pzzd6WJMB9AEvxko */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:0fBjYdpI00Zh4DOU */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:BOLrxpQUnNf-RGkl */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:vlemuN-WAd0DOIrQ */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:VwNOoq541_-mHYXU */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:SSUqtaDexLmaCKPL */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calid028379b06c (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:HZ1tHbR2Dt_KTVuU */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:EDWRf1zIjtRGNM75 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:sQYrgCcyFTfwe-KG */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:_AVYGT4MgvO9mDzL */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:11S-Y5vdX-ukQr9D */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:20bWuJHxuwqXoW64 */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:bA8NF-2niZfm0Bny */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:SvsxaYOQTSfAGOMS */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:Fax6ghNGduR_Bs0C */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:F-z0li6SCGhIi1h- */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:i7ECeiEtn6v3vf9T */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:8019CeBjYH9tOWXZ */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:mLG2PvHzCDBIa2BF */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:VV8HgJCvpdvbiksO */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:QCm2YkxZaKWLkddg */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:i56K1FRsF6bZuLww */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calid1a9e99aa3f (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:mTCFy7ayLdxPL7Bl */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:34X4cs4h80vv5i7Q */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:dnJrYEYa94AhZwgo */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:sWMMOo59DFA1M6_v */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:G3FLJGvIiaIfwDIM */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:qAFGLTsY9vSJy7vq */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:qCi4dm_uC-IuyBCY */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Fi28nfnt2L4ZtJbw */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:K010QQ7m_D9s72b5 */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:igB39r6XBeoqdaLq */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:QKDTWcg5jxvfgr1c */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:aSmcIotQPpwZEsB3 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:51HzftSXo0bzah7h */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:QFSGjx1d_e64OVxr */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:3oByRsXDGSJQrYqA */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:S3qMTJF-hAP3EF6L */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calid22063ed957 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:ngXQnpMhj8p5MKfX */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:Lgv1gnkD0kVrou8d */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:t9Rp8yP8hUDHJp46 */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:DMxSo8sWaJSsScGk */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:tBr3IBU7tFckL_BJ */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:nSMgXgsgBL2qdDa8 */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:AVajmvBBhdW0TY85 */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:oLGdvFc9mbWh3pCq */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:a-Da3HCJTUt_u-2w */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:9FyyUu6KadXEFgbY */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:zLlb0EKm6wftnR3N */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:7Bmh34Vc6tcf5x9i */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:4LhUPWXCtRKYNMYK */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:gNq-nVp1Z61Yf_lR */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:uFKqLgxkTti1gJ8Q */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:Hi-Lx4BUv7A2jUiI */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calid71ef323b8e (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 2360 1203K ACCEPT all -- any any anywhere anywhere /* cali:IcdpGaU0DgNru84X */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:uiQua25ZU0yFsOgZ */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:TgZ00F3ZbcF97EGK */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:asGVYoONvFKse_Nu */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:-k3QslJJpNE2pDuQ */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 cali-pro-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:8vN8plwRwJdLqSUg */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:enNlYVoOopAyg_Dr */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:033jmzTtYMjxCTsy */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:BDmOdnFY2PgrqBLC */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:xxau5_UIUHQfSw84 */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:E_1CropgJ9m2Buoz */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calidbb100a25d7 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:vO1T7wGY9MhKt4rW */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:KKbN4e6aM5LSUb_7 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:NMc6wZYfU2YXDVTM */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:NYLdQoIg7N4aEItq */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:ypsB3VQqHnmV75Ht */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:-e5IKpZE-UuxYrGj */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:-KloWwAckReK2F3S */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:pRdNpkwXOi2Ni1QK */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:uXXjWkKPFjvk-pRc */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:94ORJF8n1ESF2HWs */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:d2q-cmHt27SQGJ6a */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:YUue7Qo_EgrXHvxD */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:t7xCQzZn8svwviP0 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Gvm6QW3URyUjpxAb */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:TaYk-NHe8YZSzLDd */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:Xhy7NiKWX6FDsIN5 */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calidd13186f4b4 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:CMA3UPprP9zAGEcF */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:90rlEhsWszCjL3Ts */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:ejAPv1vtGs33aI1J */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:1GU-CaxlBytfbCYC */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:uMESv372dG2vivL8 */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:6trnzjF7tEIuaqsT */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:kXEp0T49j2FguySI */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:gcsWaT8l48ZKIGT1 */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:64Qj6ZNx4taxHYZ- */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:0QEW-UPYer3ULIlV */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:rOazdmTZkisyCqF_ */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:a4LhN6GSy3A6p3DP */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:jyMVS6XwDkJpnF-I */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:jUw6CrxNSvrKW71d */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:h0dXlMPP3i3wqdgk */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:Z43dJZYk681UpHKH */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calie09028c913b (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:cm7FUCnTK_WYpx4G */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:K8VoCyQfs1IADjDl */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:l9FjYpExGatMtdv1 */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:9_WhJeHdCiiRd36P */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:HxAzg6sLCrfvtdHu */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:SEVN8Fi4UeO7ME3H */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:62zRg5DLr0xJSNLt */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:jNSV3p3XKmOoOBA4 */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:amEtDRlxvu3JrX7M */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:1sANN9ukN8h8wdLg */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:YqT3YC8FKrhnUKF7 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:UEiVF5OP9VytILla */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:4MPm5dDrIfd88Bbv */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:OLMH3MKrn0V6fL4m */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:Liyb0f12k0JtAgsD */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:d-uRNHKQ3E6Vp03_ */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calie9d827dd026 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:BsjveHM5mZy-98Cl */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:lTM7ID-89mn_MbWv */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:RyrCPvo3Stvr30ui */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:m9w5mgTI7U76vg-F */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:5FuhqQ1_-Yi_3DpZ */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:6gaAYl9fLwBu5Zoy */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:FZQeJQOTq7PDap2M */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:P8S08t_DBhg5GsWb */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:GvcHhUXUgnnNlxeJ */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:zJwnh88ieoFRGVad */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:l6c0m9LCobei02SM */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:mlR2flslukLfRn_1 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:DpMz2e0Hx1LonRXJ */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:0SNzN1KQ3GXFk53W */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:zId2YMAhFH906lEk */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:ZSeZPRIhGSJ7DO6a */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calif1b9233c704 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:0vdF9Rxyb4t4hVop */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:d23fy8icN8HjwJtq */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:VQ1QQfhXA723ss3T */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:Uxjw_U8uwFTGeuHH */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:PPA9Nnzz3BsyTRAV */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:MTYpLtvXgIrsYTSl */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:TaUuEBaUlpsDvDAu */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:nbrQsG557xCkwBQW */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:PVKnNwR3SMBAOiZ_ */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:FcafMoBpse-s8-bh */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:U2SNAUHznA7ByCP0 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:LNwFXHurx3U_ajVT */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:K46idPRwDFugrtOy */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Y3qEFmQizy06wbgp */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:uLKrrDNdgQbn3QWT */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:DBdx4UuARRQJWLkU */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calif57467b0a4f (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:UQoYVaNsH_3TyiK_ */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:T8CyXYU4QnSpHeXU */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:HC9-6K0LIK-GGjTg */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:7i7ojybwXHXZ7pyq */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:gEwBx0prisZdPF_z */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:1ZF1grVl3aoGlz35 */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:lYN2UF-l_37py0_M */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:J1ptaXpD4fnlty5S */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:8_84OYsyNmrf4hGE */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:roteqMx-4YCPPWsF */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:Ggil-KYH-F8n22tI */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:trwR3gRJ1BT5rQj5 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:wZIi05MrOOCfYRcX */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:4toQO-ywro8vIcCl */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:nii38nhoMquaG6Md */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:-1iBCKq3cUwO7hmc */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calif63fa556511 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 748 117K ACCEPT all -- any any anywhere anywhere /* cali:RJLtCEIUQ8oLuM7G */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:LSMgkaDBkm52MFAt */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:h3IwLD0LiM2hJnyI */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:pBwpDbDvn3ubifRd */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:9W-YLasItpqjQpPm */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 cali-pro-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:5TyiEnY9MzcLNolm */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:UnPNwWnp4y72cavG */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:LtITJwVUv2Ih4Nkc */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:UhFdUQP-PZzUjQKN */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:ID6XgK_EyNqOGO5Q */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:x0GFkGnvDeuW34wJ */ /* Drop if no profiles matched */ | |
| Chain cali-fw-calif6838e0d7da (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:Ke1KyJLiLfbH235g */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:WlNomXAhUp9ZksxY */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:mAMveMecAWUTxj04 */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:9bLdY3xEPxeeRRjx */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:q1bOIIFP9PhdZnef */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:Fqc2CKhMxnXUFNhr */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:bU0hs3cya0Z2-dcB */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:wsw_4MqiaurcTrI6 */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:Ig-FahJ-4qFQQPBo */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:cpf3-bF7LeAyWasd */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:c-94FdZardp-AcRr */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:BHgZtcZDobZzaJHW */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:iUne3Yhu8eLvqVX3 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Z7DmjVIaebnmoieW */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:vwVig3DwIMnQcY_8 */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:4tHRVkRun5mMJHr8 */ /* Drop if no profiles matched */ | |
| Chain cali-fw-califf10b72bf03 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:HDR8u2Dii4CDYhQQ */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:6eXyFcFlhZFe8k_E */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:RE7v3mb_5VpDoOgf */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:UEDrqZFV3tr0uolC */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:ZKxXlvsVZ6vXkApr */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:tgIIrkrHUCwZCD-t */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:jvAwIG0K3uA6YEdu */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:MNvQkbO5ps8Y0EiG */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:lx9S2DGYWBiUBLZI */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:ITBO79o9fS9dsiVz */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:1NHmZeHEtdFrbVLQ */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:U57sGMd1nfxwfdp8 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:0ttHWOcHTBG6W2Vf */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:WI1u2VOtVB2Cs5Io */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:tkHlSf3HtOfrkBKi */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:ARcksgSa6E7EF2vd */ /* Drop if no profiles matched */ | |
| Chain cali-fw-califf64fe2b1c6 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:6GVTKtCTJBY2uujP */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:qSfv5Hkd5VPdJiCI */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:bArpDPoVEs4lZAAF */ MARK and 0xfffcffff | |
| 0 0 DROP udp -- any any anywhere anywhere /* cali:akNKIt_CczDa42yM */ /* Drop VXLAN encapped packets originating in workloads */ multiport dports 4789 | |
| 0 0 DROP ipencap -- any any anywhere anywhere /* cali:YxTucxX1NjxOvHfu */ /* Drop IPinIP encapped packets originating in workloads */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:HIgqRV_FBWl7hSlQ */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-po-_1xbqoPV7KLLL2JHnhzu all -- any any anywhere anywhere /* cali:d-5A_2MfMNCP-2MD */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:ob-G2QgUNA0Cjr1K */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:OCstBjuOQWwlc99a */ mark match 0x0/0x20000 nflog-prefix "DPE|default" nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:_dIL6lC17-sC-10N */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pro-kns.test1 all -- any any anywhere anywhere /* cali:3isO9FO70_M5bdae */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:meCJr5pkLc3kfqyc */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pro-ksa.test1.default all -- any any anywhere anywhere /* cali:FzsPVSLWoVLgRLd0 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:1ATarg_VHMVN4rNr */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:zjd8Pt6PxtmDBvI0 */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:2MyIn1X4j59L-rFe */ /* Drop if no profiles matched */ | |
| Chain cali-pi-_FDiLImilezd09cpg5ci (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK tcp -- any any anywhere anywhere /* cali:wH4Z-YLtazvrkIUi */ /* Policy calico-apiserver/knp.default.allow-apiserver ingress */ multiport dports 5443 MARK or 0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:pV3tRI_BN9MkLz81 */ mark match 0x10000/0x10000 nflog-prefix "API0|calico-apiserver/knp.default.allow-apiserver" nflog-group 1 nflog-size 80 | |
| Chain cali-pi-_U7WUiLyTu5Vc3j6v19u (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK tcp -- any any anywhere anywhere /* cali:-1XSFfQZOlUTo8yH */ /* Policy calico-system/knp.default.goldmane ingress */ multiport dports 7443 MARK or 0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:EMIA5LQXZZkoiYUT */ mark match 0x10000/0x10000 nflog-prefix "API0|calico-system/knp.default.goldmane" nflog-group 1 nflog-size 80 | |
| Chain cali-pi-_YYnSgB46MA1TYU44kJq (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 all -- any any anywhere anywhere /* cali:JBv9xOy5yJdiWKiY */ /* Policy calico-system/knp.default.whisker ingress */ | |
| Chain cali-po-_1xbqoPV7KLLL2JHnhzu (51 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK tcp -- any any anywhere anywhere /* cali:mDdqkYpQ8XTfbAXB */ /* Policy test1/knp.default.testpol1 egress */ match-set cali40s:plW4xKCmcWmAicsFuKWtwx4 dst multiport dports http MARK or 0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:cOcfWVkmhYmokFtG */ mark match 0x10000/0x10000 nflog-prefix "APE0|test1/knp.default.testpol1" nflog-group 2 nflog-size 80 | |
| Chain cali-po-_YYnSgB46MA1TYU44kJq (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK tcp -- any any anywhere anywhere /* cali:WLeBgvgJTxHWj12b */ /* Policy calico-system/knp.default.whisker egress */ match-set cali40s:bgLSTkNhu0BKRQ9zwXjvfbX dst multiport dports 7443 MARK or 0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:ZCKHAWDzorg1xgU9 */ mark match 0x10000/0x10000 nflog-prefix "APE0|calico-system/knp.default.whisker" nflog-group 2 nflog-size 80 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:3UX05GcN2RCJ36oa */ mark match 0x10000/0x10000 | |
| 0 0 MARK tcp -- any any anywhere anywhere /* cali:8bPWZZY0GvWgDVWB */ match-set cali40s:n27_8wNKytyIy8FV4MfcwNI dst multiport dports domain MARK or 0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:djKrvOA3jJyhyYiW */ mark match 0x10000/0x10000 nflog-prefix "APE1|calico-system/knp.default.whisker" nflog-group 2 nflog-size 80 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:ekAjEdOWCdE3pANn */ mark match 0x10000/0x10000 | |
| 0 0 MARK udp -- any any anywhere anywhere /* cali:ew262h3gUE6ZESH4 */ match-set cali40s:n27_8wNKytyIy8FV4MfcwNI dst multiport dports domain MARK or 0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:oz5I3LtAEHtfHSTH */ mark match 0x10000/0x10000 nflog-prefix "APE2|calico-system/knp.default.whisker" nflog-group 2 nflog-size 80 | |
| Chain cali-pri-_4yi5_iSUAwsU8zMHTk (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 all -- any any anywhere anywhere /* cali:ZYnaZZFwsSjfXO4C */ /* Profile ksa.calico-apiserver.calico-apiserver ingress */ | |
| Chain cali-pri-_eY4Bnp6m80Op5FOwqd (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 all -- any any anywhere anywhere /* cali:jyhZblM1OzY4DUqi */ /* Profile ksa.calico-system.goldmane ingress */ | |
| Chain cali-pri-_jtt6i-KVVwZ-74H4ov (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 all -- any any anywhere anywhere /* cali:No_RDbsVx31noDvv */ /* Profile ksa.calico-system.whisker ingress */ | |
| Chain cali-pri-_kJqfZpgUe7r2t4A-14 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:IQx0SzlDGn6BPv0A */ /* Profile kns.calico-apiserver ingress */ MARK or 0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:dHGDmF90Anl0gS_s */ mark match 0x10000/0x10000 nflog-prefix "ARI0|kns.calico-apiserver" nflog-group 1 nflog-size 80 | |
| Chain cali-pri-_nzzjLvInId1gPHmQz_ (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 all -- any any anywhere anywhere /* cali:UQoEf2WCdU0bPTCb */ /* Profile ksa.calico-system.calico-kube-controllers ingress */ | |
| Chain cali-pri-_u2Tn2rSoAPffvE7JO6 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 all -- any any anywhere anywhere /* cali:WqgznqAQ-uYV0oBx */ /* Profile ksa.kube-system.coredns ingress */ | |
| Chain cali-pri-_ymJUz7yzI6NOKJhG2- (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 all -- any any anywhere anywhere /* cali:52zm9tLYY65R0fSD */ /* Profile ksa.calico-system.csi-node-driver ingress */ | |
| Chain cali-pri-kns.calico-system (4 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:hLANj-OVIyT53h_j */ /* Profile kns.calico-system ingress */ MARK or 0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:eDg78bIqr5YAUJqq */ mark match 0x10000/0x10000 nflog-prefix "ARI0|kns.calico-system" nflog-group 1 nflog-size 80 | |
| Chain cali-pri-kns.kube-system (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:J1TyxtHWd0qaBGK- */ /* Profile kns.kube-system ingress */ MARK or 0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:GulrEF2fpGf_rDXZ */ mark match 0x10000/0x10000 nflog-prefix "ARI0|kns.kube-system" nflog-group 1 nflog-size 80 | |
| Chain cali-pri-kns.test1 (51 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:JqCDFisbXDx5WOXd */ /* Profile kns.test1 ingress */ MARK or 0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:Bwm55l0eaagqw1LU */ mark match 0x10000/0x10000 nflog-prefix "ARI0|kns.test1" nflog-group 1 nflog-size 80 | |
| Chain cali-pri-ksa.test1.default (51 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 all -- any any anywhere anywhere /* cali:0vNS2XLcHWR92ENw */ /* Profile ksa.test1.default ingress */ | |
| Chain cali-pro-_4yi5_iSUAwsU8zMHTk (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 all -- any any anywhere anywhere /* cali:Pp_dQp2FeNabRhyi */ /* Profile ksa.calico-apiserver.calico-apiserver egress */ | |
| Chain cali-pro-_eY4Bnp6m80Op5FOwqd (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 all -- any any anywhere anywhere /* cali:2fVOokqK7Gq6i9oT */ /* Profile ksa.calico-system.goldmane egress */ | |
| Chain cali-pro-_jtt6i-KVVwZ-74H4ov (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 all -- any any anywhere anywhere /* cali:57j7D-KvPIuU1Pml */ /* Profile ksa.calico-system.whisker egress */ | |
| Chain cali-pro-_kJqfZpgUe7r2t4A-14 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:_cFTxC141wwWRzyZ */ /* Profile kns.calico-apiserver egress */ MARK or 0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:f0yo1d83bjuf3_XV */ mark match 0x10000/0x10000 nflog-prefix "ARE0|kns.calico-apiserver" nflog-group 2 nflog-size 80 | |
| Chain cali-pro-_nzzjLvInId1gPHmQz_ (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 all -- any any anywhere anywhere /* cali:5bHxBXLMkJKgC6dk */ /* Profile ksa.calico-system.calico-kube-controllers egress */ | |
| Chain cali-pro-_u2Tn2rSoAPffvE7JO6 (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 all -- any any anywhere anywhere /* cali:0-_UPh39dt5XfhmJ */ /* Profile ksa.kube-system.coredns egress */ | |
| Chain cali-pro-_ymJUz7yzI6NOKJhG2- (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 all -- any any anywhere anywhere /* cali:yuJvAdyU1LYltt-O */ /* Profile ksa.calico-system.csi-node-driver egress */ | |
| Chain cali-pro-kns.calico-system (4 references) | |
| pkts bytes target prot opt in out source destination | |
| 80 4800 MARK all -- any any anywhere anywhere /* cali:gWxJzCZXxl31NR0P */ /* Profile kns.calico-system egress */ MARK or 0x10000 | |
| 80 4800 NFLOG all -- any any anywhere anywhere /* cali:AEuaZm2Broif1jyV */ mark match 0x10000/0x10000 nflog-prefix "ARE0|kns.calico-system" nflog-group 2 nflog-size 80 | |
| Chain cali-pro-kns.kube-system (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 8 714 MARK all -- any any anywhere anywhere /* cali:tgOR2S8DVHZW3F1M */ /* Profile kns.kube-system egress */ MARK or 0x10000 | |
| 8 714 NFLOG all -- any any anywhere anywhere /* cali:FNtcg_qkksn6zdBc */ mark match 0x10000/0x10000 nflog-prefix "ARE0|kns.kube-system" nflog-group 2 nflog-size 80 | |
| Chain cali-pro-kns.test1 (51 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:Ta4QHZbv1h3hFe9O */ /* Profile kns.test1 egress */ MARK or 0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:6brBGYtnODCsI6Qn */ mark match 0x10000/0x10000 nflog-prefix "ARE0|kns.test1" nflog-group 2 nflog-size 80 | |
| Chain cali-pro-ksa.test1.default (51 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 all -- any any anywhere anywhere /* cali:QuhddfYRcL-ihmo2 */ /* Profile ksa.test1.default egress */ | |
| Chain cali-set-endpoint-mark (3 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-set-endpoint-mark-0 all -- cali0+ any anywhere anywhere [goto] /* cali:UsDHcHwRpNwwYlaM */ | |
| 0 0 cali-set-endpoint-mark-1 all -- cali1+ any anywhere anywhere [goto] /* cali:TyIZV8TS2_K6WG15 */ | |
| 0 0 cali-set-endpoint-mark-2 all -- cali2+ any anywhere anywhere [goto] /* cali:o8ssChHuhwuER1U6 */ | |
| 0 0 cali-set-endpoint-mark-3 all -- cali3+ any anywhere anywhere [goto] /* cali:3uf05gs_oAKFSiUO */ | |
| 0 0 cali-set-endpoint-mark-4 all -- cali4+ any anywhere anywhere [goto] /* cali:oA2JdvSY66BUMFHM */ | |
| 0 0 cali-set-endpoint-mark-5 all -- cali5+ any anywhere anywhere [goto] /* cali:_CtLu9Y-YU2YANoM */ | |
| 0 0 cali-sm-cali697b6656220 all -- cali697b6656220 any anywhere anywhere [goto] /* cali:SwGYtDFS3EDKxnOE */ | |
| 0 0 cali-set-endpoint-mark-7 all -- cali7+ any anywhere anywhere [goto] /* cali:vYAbbSNYmBXXaMZj */ | |
| 0 0 cali-set-endpoint-mark-8 all -- cali8+ any anywhere anywhere [goto] /* cali:LHuPC4E--Z2H4j4w */ | |
| 0 0 cali-set-endpoint-mark-9 all -- cali9+ any anywhere anywhere [goto] /* cali:8T3kLCbOPxiypM9H */ | |
| 0 0 cali-set-endpoint-mark-a all -- calia+ any anywhere anywhere [goto] /* cali:uzXy8PQaJBrxCw6H */ | |
| 0 0 cali-set-endpoint-mark-b all -- calib+ any anywhere anywhere [goto] /* cali:q76kf6P9F-EfQtHW */ | |
| 0 0 cali-set-endpoint-mark-c all -- calic+ any anywhere anywhere [goto] /* cali:PKVu5XucYO-72DUf */ | |
| 0 0 cali-set-endpoint-mark-d all -- calid+ any anywhere anywhere [goto] /* cali:dMdb_s3MwRuwSSn2 */ | |
| 0 0 cali-set-endpoint-mark-e all -- calie+ any anywhere anywhere [goto] /* cali:odJdRbcpG9h6h38g */ | |
| 0 0 cali-set-endpoint-mark-f all -- calif+ any anywhere anywhere [goto] /* cali:CWCW_bAz5vOlzSPJ */ | |
| 0 0 cali-sm-adummy0 all -- adummy0 any anywhere anywhere [goto] /* cali:r7JRGskzEZdwDNQc */ | |
| 0 0 cali-sm-adummy1 all -- adummy1 any anywhere anywhere [goto] /* cali:pne37ghiFxlZoH9m */ | |
| 0 0 DROP all -- cali+ any anywhere anywhere /* cali:-WENz4nHwOUxoJdW */ /* Unknown endpoint */ | |
| 3 238 MARK all -- any any anywhere anywhere /* cali:enzYRqtIlauAIten */ /* Non-Cali endpoint mark */ MARK xset 0x200000/0xffe00000 | |
| Chain cali-set-endpoint-mark-0 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-sm-cali0382da494f3 all -- cali0382da494f3 any anywhere anywhere [goto] /* cali:rX2rdeYkDrRBeqa9 */ | |
| 0 0 cali-sm-cali0a13900be75 all -- cali0a13900be75 any anywhere anywhere [goto] /* cali:tuVyGhe_WjC9HUr8 */ | |
| Chain cali-set-endpoint-mark-1 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-sm-cali1927ac942cc all -- cali1927ac942cc any anywhere anywhere [goto] /* cali:ywAmNrqviYijBgVy */ | |
| 0 0 cali-sm-cali1df5018ae1f all -- cali1df5018ae1f any anywhere anywhere [goto] /* cali:s7DrWw5dES7eAaju */ | |
| Chain cali-set-endpoint-mark-2 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-sm-cali248c89b06ea all -- cali248c89b06ea any anywhere anywhere [goto] /* cali:Le2DUuH7pt20HRG2 */ | |
| 0 0 cali-sm-cali2bb77418da9 all -- cali2bb77418da9 any anywhere anywhere [goto] /* cali:r88DNEmDBdOSEyoi */ | |
| 0 0 cali-sm-cali2f6a0c6b0c0 all -- cali2f6a0c6b0c0 any anywhere anywhere [goto] /* cali:h1SdgLXyWbRbUbz7 */ | |
| 0 0 cali-sm-cali2fe230144a3 all -- cali2fe230144a3 any anywhere anywhere [goto] /* cali:OV_1dRGcvim22q0I */ | |
| Chain cali-set-endpoint-mark-3 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-sm-cali364ce98f041 all -- cali364ce98f041 any anywhere anywhere [goto] /* cali:V4JwCtQEI6UH1lns */ | |
| 0 0 cali-sm-cali36db3a7dbe1 all -- cali36db3a7dbe1 any anywhere anywhere [goto] /* cali:EDGnWYscCCp8o9sy */ | |
| 0 0 cali-sm-cali38258924007 all -- cali38258924007 any anywhere anywhere [goto] /* cali:4dqPcoTgmbRnXIEZ */ | |
| 0 0 cali-sm-cali3a70077d8c5 all -- cali3a70077d8c5 any anywhere anywhere [goto] /* cali:6TupkSN6DlFqWDrp */ | |
| 0 0 cali-sm-cali3c8b1c90f06 all -- cali3c8b1c90f06 any anywhere anywhere [goto] /* cali:G1STrmXpFGbuxLAO */ | |
| Chain cali-set-endpoint-mark-4 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-sm-cali4173d7d0a93 all -- cali4173d7d0a93 any anywhere anywhere [goto] /* cali:pMtwdE0awrydbdp5 */ | |
| 0 0 cali-sm-cali4c8ed377fe0 all -- cali4c8ed377fe0 any anywhere anywhere [goto] /* cali:tfB38lmKu4WCCr68 */ | |
| Chain cali-set-endpoint-mark-5 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-sm-cali53a298fdc89 all -- cali53a298fdc89 any anywhere anywhere [goto] /* cali:RTYfUQ3Iv0QzbaPV */ | |
| 0 0 cali-sm-cali54b1730f3e4 all -- cali54b1730f3e4 any anywhere anywhere [goto] /* cali:v6eLfN1_4q3TGDkD */ | |
| 0 0 cali-sm-cali58424ecb876 all -- cali58424ecb876 any anywhere anywhere [goto] /* cali:GNd7JVTdnCPJhFlW */ | |
| 0 0 cali-sm-cali5a433393f21 all -- cali5a433393f21 any anywhere anywhere [goto] /* cali:KvF6G20Lz7mbWoiK */ | |
| Chain cali-set-endpoint-mark-7 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-sm-cali701e7cc6c80 all -- cali701e7cc6c80 any anywhere anywhere [goto] /* cali:29oVXkydzhxoTdhc */ | |
| 0 0 cali-sm-cali71f32e5af89 all -- cali71f32e5af89 any anywhere anywhere [goto] /* cali:hNW_4KvhlE9VV7IH */ | |
| 0 0 cali-sm-cali732acdb1f64 all -- cali732acdb1f64 any anywhere anywhere [goto] /* cali:TLaTTBmd8mT6Clak */ | |
| 0 0 cali-sm-cali77878fe399a all -- cali77878fe399a any anywhere anywhere [goto] /* cali:vF7IfYwvL7Qw2-G1 */ | |
| 0 0 cali-sm-cali7c2f1aa20fb all -- cali7c2f1aa20fb any anywhere anywhere [goto] /* cali:HnbfnoQJBo7RY3zz */ | |
| 0 0 cali-sm-cali7f638ed56c0 all -- cali7f638ed56c0 any anywhere anywhere [goto] /* cali:0foNLDGIBcYIp8cR */ | |
| Chain cali-set-endpoint-mark-8 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-sm-cali81738822977 all -- cali81738822977 any anywhere anywhere [goto] /* cali:C8h9UlWWtGsMNfAM */ | |
| 0 0 cali-sm-cali82935ebf305 all -- cali82935ebf305 any anywhere anywhere [goto] /* cali:QtTDgQM00WpRIEjA */ | |
| 0 0 cali-sm-cali87b4909dad4 all -- cali87b4909dad4 any anywhere anywhere [goto] /* cali:jx8PWWX8VHGmp87u */ | |
| 0 0 cali-sm-cali89012b27407 all -- cali89012b27407 any anywhere anywhere [goto] /* cali:wr9RB2v_dONH3k_c */ | |
| Chain cali-set-endpoint-mark-9 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-sm-cali992495da41b all -- cali992495da41b any anywhere anywhere [goto] /* cali:9slkpgrZobFu_Meh */ | |
| 0 0 cali-sm-cali9cfc97f0efe all -- cali9cfc97f0efe any anywhere anywhere [goto] /* cali:e2qZ_vyxTJcPVo3H */ | |
| 0 0 cali-sm-cali9d339d9a5ab all -- cali9d339d9a5ab any anywhere anywhere [goto] /* cali:6Mn3w8bwfRh2Ivqk */ | |
| 0 0 cali-sm-cali9e00d61fdac all -- cali9e00d61fdac any anywhere anywhere [goto] /* cali:PKKT2XejXYkPQddq */ | |
| Chain cali-set-endpoint-mark-a (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-sm-calia064cfc5be9 all -- calia064cfc5be9 any anywhere anywhere [goto] /* cali:WiwOUJ8qzYxIQSL- */ | |
| 0 0 cali-sm-calia34ee2acd26 all -- calia34ee2acd26 any anywhere anywhere [goto] /* cali:EyFDWTt8wqCZ7bdN */ | |
| 0 0 cali-sm-calia3a151b9de4 all -- calia3a151b9de4 any anywhere anywhere [goto] /* cali:P9qxRTNiitqHGHV5 */ | |
| 0 0 cali-sm-calia906e4bed45 all -- calia906e4bed45 any anywhere anywhere [goto] /* cali:QADbEA29WOGKxpKa */ | |
| 0 0 cali-sm-caliaf14a7e37b7 all -- caliaf14a7e37b7 any anywhere anywhere [goto] /* cali:26aVfRRksYY0bF7S */ | |
| Chain cali-set-endpoint-mark-b (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-sm-calib09e260b500 all -- calib09e260b500 any anywhere anywhere [goto] /* cali:QMO1ed6WoPR7Myby */ | |
| 0 0 cali-sm-calib66b16815ec all -- calib66b16815ec any anywhere anywhere [goto] /* cali:NF40L-i88W78GJGT */ | |
| 0 0 cali-sm-calib90d52a5748 all -- calib90d52a5748 any anywhere anywhere [goto] /* cali:osd0n-MvBEvYIpEg */ | |
| 0 0 cali-sm-calibe09b1f76bd all -- calibe09b1f76bd any anywhere anywhere [goto] /* cali:Fe7ZkuLcVc3ABnxm */ | |
| Chain cali-set-endpoint-mark-c (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-sm-calic8ab04e10f2 all -- calic8ab04e10f2 any anywhere anywhere [goto] /* cali:0moykI3-6fafAo5W */ | |
| 0 0 cali-sm-calice4755bda64 all -- calice4755bda64 any anywhere anywhere [goto] /* cali:ZH4W3-AGM6_0ZWKw */ | |
| Chain cali-set-endpoint-mark-d (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-sm-calid028379b06c all -- calid028379b06c any anywhere anywhere [goto] /* cali:q34h6J3aMpvjorzv */ | |
| 0 0 cali-sm-calid1a9e99aa3f all -- calid1a9e99aa3f any anywhere anywhere [goto] /* cali:OuuuY6lb4QKXkmKj */ | |
| 0 0 cali-sm-calid22063ed957 all -- calid22063ed957 any anywhere anywhere [goto] /* cali:Cwl-F-g-s0w_8Tu7 */ | |
| 0 0 cali-sm-calid71ef323b8e all -- calid71ef323b8e any anywhere anywhere [goto] /* cali:WQwhoGnDeR0B6y8J */ | |
| 0 0 cali-sm-calidbb100a25d7 all -- calidbb100a25d7 any anywhere anywhere [goto] /* cali:fuBD831sEL3Toutr */ | |
| 0 0 cali-sm-calidd13186f4b4 all -- calidd13186f4b4 any anywhere anywhere [goto] /* cali:pcmqdDJyv2XW9Pwp */ | |
| Chain cali-set-endpoint-mark-e (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-sm-calie09028c913b all -- calie09028c913b any anywhere anywhere [goto] /* cali:xdKKjlXsp5E9I-D9 */ | |
| 0 0 cali-sm-calie9d827dd026 all -- calie9d827dd026 any anywhere anywhere [goto] /* cali:yQdrKE-5xSwncDDh */ | |
| Chain cali-set-endpoint-mark-f (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-sm-calif1b9233c704 all -- calif1b9233c704 any anywhere anywhere [goto] /* cali:pFvS5Zalonrwr_BH */ | |
| 0 0 cali-sm-calif57467b0a4f all -- calif57467b0a4f any anywhere anywhere [goto] /* cali:2PfevnWALWhkAnok */ | |
| 0 0 cali-sm-calif63fa556511 all -- calif63fa556511 any anywhere anywhere [goto] /* cali:wk7oj94XByMNkFCM */ | |
| 0 0 cali-sm-calif6838e0d7da all -- calif6838e0d7da any anywhere anywhere [goto] /* cali:kVeQZUE_RhOvYSLY */ | |
| 0 0 cali-sm-califf10b72bf03 all -- califf10b72bf03 any anywhere anywhere [goto] /* cali:7PEtT1DaaQRZGkod */ | |
| 0 0 cali-sm-califf64fe2b1c6 all -- califf64fe2b1c6 any anywhere anywhere [goto] /* cali:zjLgNyhXG16Abpud */ | |
| Chain cali-sm-adummy0 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:H_z1EA9Itf4bWolc */ MARK xset 0xb9400000/0xffe00000 | |
| Chain cali-sm-adummy1 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:XC4n0CkYgvUgzsBN */ MARK xset 0xb9600000/0xffe00000 | |
| Chain cali-sm-cali0382da494f3 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:dDMQkPa_qMGOkYxL */ MARK xset 0x5b400000/0xffe00000 | |
| Chain cali-sm-cali0a13900be75 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:HRB-lZSk2ThwcKNV */ MARK xset 0xc7a00000/0xffe00000 | |
| Chain cali-sm-cali1927ac942cc (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 3 180 MARK all -- any any anywhere anywhere /* cali:xAxzR1TCUov8kuFz */ MARK xset 0xcc000000/0xffe00000 | |
| Chain cali-sm-cali1df5018ae1f (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:8njUm101mKLhLR6H */ MARK xset 0xf8000000/0xffe00000 | |
| Chain cali-sm-cali248c89b06ea (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:E0G0PFe3H6FjxU1W */ MARK xset 0x5400000/0xffe00000 | |
| Chain cali-sm-cali2bb77418da9 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:uG9FCPxytPpduBXC */ MARK xset 0x14e00000/0xffe00000 | |
| Chain cali-sm-cali2f6a0c6b0c0 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:PhrUlfHRCuk0fMTt */ MARK xset 0x5e200000/0xffe00000 | |
| Chain cali-sm-cali2fe230144a3 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:uNQXy1iDKi78WnWZ */ MARK xset 0x31200000/0xffe00000 | |
| Chain cali-sm-cali364ce98f041 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:grhYZZXOPTG8Flc8 */ MARK xset 0x5fa00000/0xffe00000 | |
| Chain cali-sm-cali36db3a7dbe1 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:RNWDgRjWWWTTcpFQ */ MARK xset 0x15000000/0xffe00000 | |
| Chain cali-sm-cali38258924007 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:5cqMSzTOrtrHP1pa */ MARK xset 0x7800000/0xffe00000 | |
| Chain cali-sm-cali3a70077d8c5 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:A5gwpnshm-i16jdi */ MARK xset 0x9b400000/0xffe00000 | |
| Chain cali-sm-cali3c8b1c90f06 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:zdDjmuJcfNHMQqOp */ MARK xset 0xdd200000/0xffe00000 | |
| Chain cali-sm-cali4173d7d0a93 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:ErNomhuUoEs_mM-w */ MARK xset 0x44200000/0xffe00000 | |
| Chain cali-sm-cali4c8ed377fe0 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:h4iFc6XBqN8eyKML */ MARK xset 0xe6800000/0xffe00000 | |
| Chain cali-sm-cali53a298fdc89 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 3 180 MARK all -- any any anywhere anywhere /* cali:ii6XNJsMJs3DKOyp */ MARK xset 0xfec00000/0xffe00000 | |
| Chain cali-sm-cali54b1730f3e4 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:l9t7Cud6rlj8m6ys */ MARK xset 0x9b000000/0xffe00000 | |
| Chain cali-sm-cali58424ecb876 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:3sxjipZ0xxsTLk_I */ MARK xset 0x14400000/0xffe00000 | |
| Chain cali-sm-cali5a433393f21 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 1 60 MARK all -- any any anywhere anywhere /* cali:yjDxZh4CzszElmGm */ MARK xset 0xbe800000/0xffe00000 | |
| Chain cali-sm-cali697b6656220 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:jKKnYJ5SOU1udmsW */ MARK xset 0xce00000/0xffe00000 | |
| Chain cali-sm-cali701e7cc6c80 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:ajKFlofQe91cAmVX */ MARK xset 0x7a00000/0xffe00000 | |
| Chain cali-sm-cali71f32e5af89 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:K1AUE1ptTpwDeVx- */ MARK xset 0xfae00000/0xffe00000 | |
| Chain cali-sm-cali732acdb1f64 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:D1UVakE9abX39jcs */ MARK xset 0x1ba00000/0xffe00000 | |
| Chain cali-sm-cali77878fe399a (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:7qTKoECDKsYfx83X */ MARK xset 0x4dc00000/0xffe00000 | |
| Chain cali-sm-cali7c2f1aa20fb (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:oILWyIiPPR5T7tm5 */ MARK xset 0xfb000000/0xffe00000 | |
| Chain cali-sm-cali7f638ed56c0 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:1qk4U9QJShfoWi7C */ MARK xset 0xcf200000/0xffe00000 | |
| Chain cali-sm-cali81738822977 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:pgJSv1onTB1N8Eob */ MARK xset 0x40c00000/0xffe00000 | |
| Chain cali-sm-cali82935ebf305 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:5k6F2PzXjvo0SDCB */ MARK xset 0x5bc00000/0xffe00000 | |
| Chain cali-sm-cali87b4909dad4 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:zif-0PcGsBHgDLyJ */ MARK xset 0xcdc00000/0xffe00000 | |
| Chain cali-sm-cali89012b27407 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:SCSgq4dNVqhyxQGL */ MARK xset 0x58800000/0xffe00000 | |
| Chain cali-sm-cali992495da41b (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:FVp50BqOrn1e2asf */ MARK xset 0x44000000/0xffe00000 | |
| Chain cali-sm-cali9cfc97f0efe (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:nhYx5juGW_Wx7C5c */ MARK xset 0x81e00000/0xffe00000 | |
| Chain cali-sm-cali9d339d9a5ab (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:k7qQYEJ9_qru494Y */ MARK xset 0xc8800000/0xffe00000 | |
| Chain cali-sm-cali9e00d61fdac (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:AobwGeF0DGYAj3SH */ MARK xset 0xbee00000/0xffe00000 | |
| Chain cali-sm-calia064cfc5be9 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:fEZARCtj6jGenfaF */ MARK xset 0xbdc00000/0xffe00000 | |
| Chain cali-sm-calia34ee2acd26 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:3q322fxHt-3tlvfC */ MARK xset 0x54800000/0xffe00000 | |
| Chain cali-sm-calia3a151b9de4 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:1l_4nk1U313z5vzQ */ MARK xset 0xf8c00000/0xffe00000 | |
| Chain cali-sm-calia906e4bed45 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:vwgcBtlTUQoa-GgT */ MARK xset 0x2ba00000/0xffe00000 | |
| Chain cali-sm-caliaf14a7e37b7 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:HvPb_MHB5y7VWdyz */ MARK xset 0x64000000/0xffe00000 | |
| Chain cali-sm-calib09e260b500 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:qjfUWvK43XgsxFmC */ MARK xset 0xb2e00000/0xffe00000 | |
| Chain cali-sm-calib66b16815ec (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 1 60 MARK all -- any any anywhere anywhere /* cali:gFG86gkIwjIkrITy */ MARK xset 0x9b200000/0xffe00000 | |
| Chain cali-sm-calib90d52a5748 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:ISq3HjSeSMqK3Rw9 */ MARK xset 0x85e00000/0xffe00000 | |
| Chain cali-sm-calibe09b1f76bd (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:mSEn06196fjpprIE */ MARK xset 0x78000000/0xffe00000 | |
| Chain cali-sm-calic8ab04e10f2 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:UgfxL32P7r6FCXTh */ MARK xset 0x9400000/0xffe00000 | |
| Chain cali-sm-calice4755bda64 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:uP86nnUCSbDL41yv */ MARK xset 0x11c00000/0xffe00000 | |
| Chain cali-sm-calid028379b06c (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:AwBXDERLxwSflY9f */ MARK xset 0x2c00000/0xffe00000 | |
| Chain cali-sm-calid1a9e99aa3f (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:fLhJ7YvFpMOA27ef */ MARK xset 0x80e00000/0xffe00000 | |
| Chain cali-sm-calid22063ed957 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:UPGW2UTAdoWF-xlD */ MARK xset 0x8c600000/0xffe00000 | |
| Chain cali-sm-calid71ef323b8e (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 1 60 MARK all -- any any anywhere anywhere /* cali:PBjIsvauMo_pieOc */ MARK xset 0x76000000/0xffe00000 | |
| Chain cali-sm-calidbb100a25d7 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:hcaSBn_SVJ6xp3BF */ MARK xset 0xc7400000/0xffe00000 | |
| Chain cali-sm-calidd13186f4b4 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:tWwcHIcygpb_T59m */ MARK xset 0xfe600000/0xffe00000 | |
| Chain cali-sm-calie09028c913b (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:kR6FYi2f0bgdN9Q8 */ MARK xset 0xca800000/0xffe00000 | |
| Chain cali-sm-calie9d827dd026 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:8jHwZQGQtfAXE3t_ */ MARK xset 0xb7a00000/0xffe00000 | |
| Chain cali-sm-calif1b9233c704 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:NiMuisI-_SX-WrQR */ MARK xset 0x7bc00000/0xffe00000 | |
| Chain cali-sm-calif57467b0a4f (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:03062ZY9TdkKwbOm */ MARK xset 0x4d800000/0xffe00000 | |
| Chain cali-sm-calif63fa556511 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 1 60 MARK all -- any any anywhere anywhere /* cali:MZ7mmWbC2owW0lPv */ MARK xset 0xc2600000/0xffe00000 | |
| Chain cali-sm-calif6838e0d7da (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:r521a-X0eQIpA5im */ MARK xset 0x53000000/0xffe00000 | |
| Chain cali-sm-califf10b72bf03 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:iHAFGENBGrOglqDY */ MARK xset 0x1be00000/0xffe00000 | |
| Chain cali-sm-califf64fe2b1c6 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:2X0MdcemW5SGvxoj */ MARK xset 0xcea00000/0xffe00000 | |
| Chain cali-th-adummy0 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:RemHtnnkZ_tP2qZY */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:zgJEJky8gJTqeBQA */ ctstate INVALID | |
| 0 0 cali-failsafe-out all -- any any anywhere anywhere /* cali:f-HvcdIzxOG-Prhi */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:m3qtxNI_rHZoPMty */ MARK and 0xfffcffff | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:xMhmLJZ8cNmTXOoS */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:DU_2In9nVZqlFPEi */ /* Drop if no profiles matched */ | |
| Chain cali-th-adummy1 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:OhTtyfaSwf8dTaed */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:Qtm2p1hC-6WwfAef */ ctstate INVALID | |
| 0 0 cali-failsafe-out all -- any any anywhere anywhere /* cali:USMrIQ3egVqQGryS */ | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:lZsuiSyg6uI-RXfq */ MARK and 0xfffcffff | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:1HoVyNN5mhNKUjZy */ nflog-prefix DRE nflog-group 2 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:XIs-WtDqb7cCxKa- */ /* Drop if no profiles matched */ | |
| Chain cali-thfw-adummy0 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:8wFrhXdE-GqEdKFr */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:1MMbujNjZybv5wGx */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:8R8NCbMvZsFLmyHo */ MARK and 0xfffcffff | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:_xsgjMnUZANCY6ah */ /* Allow forwarded traffic by default */ MARK or 0x10000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:_PhC01ND8LoeTtGm */ /* Return for accepted forward traffic */ | |
| Chain cali-thfw-adummy1 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:_2I8OrJC1BCwQ0Wz */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:kH3btOyc9CZzYkBM */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:-rHOAJsGvASgVB75 */ MARK and 0xfffcffff | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:Pjp7Iw8wL3C3yfRm */ /* Allow forwarded traffic by default */ MARK or 0x10000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:aM-L8Pi-hpVqBolw */ /* Return for accepted forward traffic */ | |
| Chain cali-to-hep-forward (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-thfw-adummy0 all -- any adummy0 anywhere anywhere [goto] /* cali:GrRdp9DmdasXczum */ | |
| 0 0 cali-thfw-adummy1 all -- any adummy1 anywhere anywhere [goto] /* cali:tlRcSKkjPfvzpCQn */ | |
| Chain cali-to-host-endpoint (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-th-adummy0 all -- any adummy0 anywhere anywhere [goto] /* cali:xPE3dvkBI8deQAE- */ | |
| 0 0 cali-th-adummy1 all -- any adummy1 anywhere anywhere [goto] /* cali:2_3yHlkKpDgsywyu */ | |
| Chain cali-to-wl-dispatch (2 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-to-wl-dispatch-0 all -- any cali0+ anywhere anywhere [goto] /* cali:dIkHjFD9PelLx7cm */ | |
| 0 0 cali-to-wl-dispatch-1 all -- any cali1+ anywhere anywhere [goto] /* cali:cOtVr_jX21sbMubK */ | |
| 0 0 cali-to-wl-dispatch-2 all -- any cali2+ anywhere anywhere [goto] /* cali:DzxtnY8HbTKkqBjq */ | |
| 0 0 cali-to-wl-dispatch-3 all -- any cali3+ anywhere anywhere [goto] /* cali:6wt_eRgXjjBP9wBe */ | |
| 0 0 cali-to-wl-dispatch-4 all -- any cali4+ anywhere anywhere [goto] /* cali:73LGgIpG-tOryEB0 */ | |
| 0 0 cali-to-wl-dispatch-5 all -- any cali5+ anywhere anywhere [goto] /* cali:kQQ-CiiPsiZYEsNO */ | |
| 0 0 cali-tw-cali697b6656220 all -- any cali697b6656220 anywhere anywhere [goto] /* cali:gj6NHDiMQflrkTDL */ | |
| 0 0 cali-to-wl-dispatch-7 all -- any cali7+ anywhere anywhere [goto] /* cali:_j-Rjz-UVd8Do25_ */ | |
| 0 0 cali-to-wl-dispatch-8 all -- any cali8+ anywhere anywhere [goto] /* cali:rzkmZB7l0Xn7Xi7Z */ | |
| 0 0 cali-to-wl-dispatch-9 all -- any cali9+ anywhere anywhere [goto] /* cali:bhmBTDqt2fB5dSn0 */ | |
| 0 0 cali-to-wl-dispatch-a all -- any calia+ anywhere anywhere [goto] /* cali:vZ8FtTp7PQkkVM-v */ | |
| 0 0 cali-to-wl-dispatch-b all -- any calib+ anywhere anywhere [goto] /* cali:ORJnxvtF_3wRmTjK */ | |
| 0 0 cali-to-wl-dispatch-c all -- any calic+ anywhere anywhere [goto] /* cali:b2JqWeFKO99jZCxh */ | |
| 0 0 cali-to-wl-dispatch-d all -- any calid+ anywhere anywhere [goto] /* cali:8PJnXH9zJq2-MQSh */ | |
| 0 0 cali-to-wl-dispatch-e all -- any calie+ anywhere anywhere [goto] /* cali:Zvs1i1wjKHkqzc6x */ | |
| 0 0 cali-to-wl-dispatch-f all -- any calif+ anywhere anywhere [goto] /* cali:1sXrx5IzwXnHF_Hf */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:m_rHP5aQxZUdTZpS */ /* Unknown interface */ | |
| Chain cali-to-wl-dispatch-0 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-tw-cali0382da494f3 all -- any cali0382da494f3 anywhere anywhere [goto] /* cali:t-GgBkL7N3kTLCLf */ | |
| 0 0 cali-tw-cali0a13900be75 all -- any cali0a13900be75 anywhere anywhere [goto] /* cali:PB2domopmxxL0AVz */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:QKlp7ekLRwf9gzms */ /* Unknown interface */ | |
| Chain cali-to-wl-dispatch-1 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 1 187 cali-tw-cali1927ac942cc all -- any cali1927ac942cc anywhere anywhere [goto] /* cali:sB3oppHrCUCZ0SVi */ | |
| 0 0 cali-tw-cali1df5018ae1f all -- any cali1df5018ae1f anywhere anywhere [goto] /* cali:2o1oTqw04-uXotYP */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:--15mfrd89V-6hGg */ /* Unknown interface */ | |
| Chain cali-to-wl-dispatch-2 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-tw-cali248c89b06ea all -- any cali248c89b06ea anywhere anywhere [goto] /* cali:qwtKL7odmECUK-y7 */ | |
| 0 0 cali-tw-cali2bb77418da9 all -- any cali2bb77418da9 anywhere anywhere [goto] /* cali:r7YVpwGp6dSoF2pF */ | |
| 0 0 cali-tw-cali2f6a0c6b0c0 all -- any cali2f6a0c6b0c0 anywhere anywhere [goto] /* cali:IXqNno_m5_VuP9Fn */ | |
| 0 0 cali-tw-cali2fe230144a3 all -- any cali2fe230144a3 anywhere anywhere [goto] /* cali:ZfzoMTkG61n9SuGS */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:7YPOYO-H1Xg5ovFf */ /* Unknown interface */ | |
| Chain cali-to-wl-dispatch-3 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-tw-cali364ce98f041 all -- any cali364ce98f041 anywhere anywhere [goto] /* cali:wqc6YXh-5AnUarKg */ | |
| 0 0 cali-tw-cali36db3a7dbe1 all -- any cali36db3a7dbe1 anywhere anywhere [goto] /* cali:QSm8x5dJZTNeNERp */ | |
| 0 0 cali-tw-cali38258924007 all -- any cali38258924007 anywhere anywhere [goto] /* cali:-YDcOq3KjaUVZOGO */ | |
| 0 0 cali-tw-cali3a70077d8c5 all -- any cali3a70077d8c5 anywhere anywhere [goto] /* cali:krbt74UoFsR4kbN4 */ | |
| 0 0 cali-tw-cali3c8b1c90f06 all -- any cali3c8b1c90f06 anywhere anywhere [goto] /* cali:yv1eVkSayD19bJrs */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:2sGcozwHXkA13z7S */ /* Unknown interface */ | |
| Chain cali-to-wl-dispatch-4 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-tw-cali4173d7d0a93 all -- any cali4173d7d0a93 anywhere anywhere [goto] /* cali:_aWBCcdtTqaIWPtS */ | |
| 0 0 cali-tw-cali4c8ed377fe0 all -- any cali4c8ed377fe0 anywhere anywhere [goto] /* cali:yHxxlSgTWLm9GAhM */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:kK_zvCE2BNRFzKWP */ /* Unknown interface */ | |
| Chain cali-to-wl-dispatch-5 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-tw-cali53a298fdc89 all -- any cali53a298fdc89 anywhere anywhere [goto] /* cali:ITNZCL1Pfn1AiqGf */ | |
| 0 0 cali-tw-cali54b1730f3e4 all -- any cali54b1730f3e4 anywhere anywhere [goto] /* cali:2PpEk7E5fYKQQk1s */ | |
| 0 0 cali-tw-cali58424ecb876 all -- any cali58424ecb876 anywhere anywhere [goto] /* cali:Febjd01OIrWpKAaB */ | |
| 0 0 cali-tw-cali5a433393f21 all -- any cali5a433393f21 anywhere anywhere [goto] /* cali:3pNQdBfMP8d86DfA */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:1GhIektwt6sejoN0 */ /* Unknown interface */ | |
| Chain cali-to-wl-dispatch-7 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-tw-cali701e7cc6c80 all -- any cali701e7cc6c80 anywhere anywhere [goto] /* cali:DID_kXdOz2kIqhfp */ | |
| 0 0 cali-tw-cali71f32e5af89 all -- any cali71f32e5af89 anywhere anywhere [goto] /* cali:kRDwrXq540fo1fCA */ | |
| 0 0 cali-tw-cali732acdb1f64 all -- any cali732acdb1f64 anywhere anywhere [goto] /* cali:ThOeWRUn5P6J2N6q */ | |
| 0 0 cali-tw-cali77878fe399a all -- any cali77878fe399a anywhere anywhere [goto] /* cali:ECnPuy_Nzu5UkbEK */ | |
| 0 0 cali-tw-cali7c2f1aa20fb all -- any cali7c2f1aa20fb anywhere anywhere [goto] /* cali:JRJ57yxRZJE6qX-X */ | |
| 0 0 cali-tw-cali7f638ed56c0 all -- any cali7f638ed56c0 anywhere anywhere [goto] /* cali:h65SWVNe6nzCzjNw */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:0YV8lpl5wV1g5Guz */ /* Unknown interface */ | |
| Chain cali-to-wl-dispatch-8 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-tw-cali81738822977 all -- any cali81738822977 anywhere anywhere [goto] /* cali:O_YPRQ43vFGwVf7o */ | |
| 0 0 cali-tw-cali82935ebf305 all -- any cali82935ebf305 anywhere anywhere [goto] /* cali:QA_MSNAWo8U6hEvu */ | |
| 0 0 cali-tw-cali87b4909dad4 all -- any cali87b4909dad4 anywhere anywhere [goto] /* cali:QjnJW6PZcrNwu59p */ | |
| 0 0 cali-tw-cali89012b27407 all -- any cali89012b27407 anywhere anywhere [goto] /* cali:tHsnbV5MkHSVUV0R */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:plc756U0n9DjQxyr */ /* Unknown interface */ | |
| Chain cali-to-wl-dispatch-9 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-tw-cali992495da41b all -- any cali992495da41b anywhere anywhere [goto] /* cali:T5-ZEAc4v-eA7REU */ | |
| 0 0 cali-tw-cali9cfc97f0efe all -- any cali9cfc97f0efe anywhere anywhere [goto] /* cali:nAxtlCLCxjNnFg0x */ | |
| 0 0 cali-tw-cali9d339d9a5ab all -- any cali9d339d9a5ab anywhere anywhere [goto] /* cali:FUfENbmRdaawqTJl */ | |
| 0 0 cali-tw-cali9e00d61fdac all -- any cali9e00d61fdac anywhere anywhere [goto] /* cali:ew1CNQEzo_Onzzzq */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:aXg6YnS4bZkiWLAP */ /* Unknown interface */ | |
| Chain cali-to-wl-dispatch-a (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-tw-calia064cfc5be9 all -- any calia064cfc5be9 anywhere anywhere [goto] /* cali:Td5vBJ-EtomVp2hh */ | |
| 0 0 cali-tw-calia34ee2acd26 all -- any calia34ee2acd26 anywhere anywhere [goto] /* cali:aFLTUOL8zzdJd387 */ | |
| 0 0 cali-tw-calia3a151b9de4 all -- any calia3a151b9de4 anywhere anywhere [goto] /* cali:qV7_ebeGLMI5eBzm */ | |
| 0 0 cali-tw-calia906e4bed45 all -- any calia906e4bed45 anywhere anywhere [goto] /* cali:Sn_P-PlYCFyveYn6 */ | |
| 0 0 cali-tw-caliaf14a7e37b7 all -- any caliaf14a7e37b7 anywhere anywhere [goto] /* cali:eonA800XW_g-oExN */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:6of6Cu0e5CZV_9nZ */ /* Unknown interface */ | |
| Chain cali-to-wl-dispatch-b (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-tw-calib09e260b500 all -- any calib09e260b500 anywhere anywhere [goto] /* cali:PCPQFMownrNl-Oyo */ | |
| 0 0 cali-tw-calib66b16815ec all -- any calib66b16815ec anywhere anywhere [goto] /* cali:n3F6PYQ4fmjQ8CGD */ | |
| 0 0 cali-tw-calib90d52a5748 all -- any calib90d52a5748 anywhere anywhere [goto] /* cali:3gPAyZCNrg9tvkv- */ | |
| 0 0 cali-tw-calibe09b1f76bd all -- any calibe09b1f76bd anywhere anywhere [goto] /* cali:EVYLIOjNQFu5m1ZI */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:BNxqkR28pBpIM0kj */ /* Unknown interface */ | |
| Chain cali-to-wl-dispatch-c (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-tw-calic8ab04e10f2 all -- any calic8ab04e10f2 anywhere anywhere [goto] /* cali:fVm0NGvrLEFaMC_Y */ | |
| 0 0 cali-tw-calice4755bda64 all -- any calice4755bda64 anywhere anywhere [goto] /* cali:38FrkBD12e5zhurz */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:e7oORwFZvSrKJ5_b */ /* Unknown interface */ | |
| Chain cali-to-wl-dispatch-d (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-tw-calid028379b06c all -- any calid028379b06c anywhere anywhere [goto] /* cali:Hgh5aRo6ywClYeJY */ | |
| 0 0 cali-tw-calid1a9e99aa3f all -- any calid1a9e99aa3f anywhere anywhere [goto] /* cali:xmybJhM2Ep2JJL1l */ | |
| 0 0 cali-tw-calid22063ed957 all -- any calid22063ed957 anywhere anywhere [goto] /* cali:pk-wXxDj475dBF25 */ | |
| 0 0 cali-tw-calid71ef323b8e all -- any calid71ef323b8e anywhere anywhere [goto] /* cali:xodVSzVoFg34uV5k */ | |
| 0 0 cali-tw-calidbb100a25d7 all -- any calidbb100a25d7 anywhere anywhere [goto] /* cali:1CJCMXFxIjgG9yQs */ | |
| 0 0 cali-tw-calidd13186f4b4 all -- any calidd13186f4b4 anywhere anywhere [goto] /* cali:WjSlYcki77DsrEa4 */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:aboVecCuSJPqqJ9n */ /* Unknown interface */ | |
| Chain cali-to-wl-dispatch-e (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-tw-calie09028c913b all -- any calie09028c913b anywhere anywhere [goto] /* cali:f2J6PlPKW10GqaW2 */ | |
| 0 0 cali-tw-calie9d827dd026 all -- any calie9d827dd026 anywhere anywhere [goto] /* cali:S1CK_7IvraqhT8H2 */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:ho_rBjNM7MSTCFat */ /* Unknown interface */ | |
| Chain cali-to-wl-dispatch-f (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 cali-tw-calif1b9233c704 all -- any calif1b9233c704 anywhere anywhere [goto] /* cali:7aXVIrIaAKEYd7zD */ | |
| 0 0 cali-tw-calif57467b0a4f all -- any calif57467b0a4f anywhere anywhere [goto] /* cali:4vDqJQwEcYkwDf3P */ | |
| 0 0 cali-tw-calif63fa556511 all -- any calif63fa556511 anywhere anywhere [goto] /* cali:HA9ztre4ERIa8adA */ | |
| 0 0 cali-tw-calif6838e0d7da all -- any calif6838e0d7da anywhere anywhere [goto] /* cali:H5LTj3_LDl-ffQvF */ | |
| 0 0 cali-tw-califf10b72bf03 all -- any califf10b72bf03 anywhere anywhere [goto] /* cali:QD36ekB4Sowml3JD */ | |
| 0 0 cali-tw-califf64fe2b1c6 all -- any califf64fe2b1c6 anywhere anywhere [goto] /* cali:7Ddl-3zMZK9549YZ */ | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:h-zPpwziLuLx5Ml- */ /* Unknown interface */ | |
| Chain cali-tw-cali0382da494f3 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:JpZfTrhraHF5yTVX */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:D-NrJFk1jJJVsrDU */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:bau5CLW66CB48g4i */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:n2lXwCqk-N4sxZNt */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Y_F0Zx8VE6isChtq */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:kzj0E1gOLOZ2gqlf */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:GwxKD8f8ddbrZUb- */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:fb5MCuNHMBfcYRpV */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:36gNaJLjvMvbXNDD */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali0a13900be75 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:TTVruxPVSc-x_0Jp */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:qw983GxqmiW80Pso */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:K5WLY26weS5oqaGO */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:U_CJF69lDApX9bnq */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:l86yVWh_g5Ne3QeC */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:rry_GXE1FMPloMMa */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Co7QecB95Fn1oC09 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:NsfMEvIZCovZkYxb */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:E3CleTbhPNDH0Vlv */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali1927ac942cc (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 2 347 ACCEPT all -- any any anywhere anywhere /* cali:F5hBCbLU1bM_GhJa */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:8NQqfOqw4HBK-AeL */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:BLK6vYBiJwTgKHBU */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.kube-system all -- any any anywhere anywhere /* cali:Mt34ID4TjMr31Za8 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:KijnFeIXYObv17cV */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:1m5A5xs7AggieuaW */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:gc2rl_JkHMRfWYFn */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:whvfvfRuGaGwjisM */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:l7sBuZC4Xc_YLdkZ */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali1df5018ae1f (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:2es6bm7As1VhlBTl */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:OBiSuaZeaOwt7nGK */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:-5D81rueJcAt4Qs2 */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.calico-system all -- any any anywhere anywhere /* cali:GxOcO6DVWyIoS1Dg */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:FZFP4Qo7myD8kpZG */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-_ymJUz7yzI6NOKJhG2- all -- any any anywhere anywhere /* cali:g3nB9LEOgoxhxN8u */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:za1qeXjrMGZ_LCZa */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:hoR_b8PVk7O9bpd8 */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:FwOWs64uJZDP7iMP */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali248c89b06ea (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:90OWbP76wbcXj1Yw */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:vCmISWV_lJeZlUab */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:fGO-o672V7PsY2uy */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:K8BFCz8kf3B0ZuPF */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:9HYAYMTbe7jMgcTb */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:bIspBn80yoYD4wCi */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:zUeCL0vQYqvvFLrj */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:Ad2nW96yEbSZNm2v */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:o3JpnIbEAnMILAJa */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali2bb77418da9 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:cbP0meNWawigTQ8u */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:2pviB8Glhusn01Kt */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:5DA-Mn8Gjl9uVDHX */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:qLtccLFAt6HH40wy */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:_MmUPpBQs7wC0lXr */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:PKh7FOE5OMHNDtrd */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:khikt7ocKK_ElYM- */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:yupu66hD5uNi3nBQ */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:_wwi6EbrSSgx_N-j */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali2f6a0c6b0c0 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:sxnUkmtl2LZIM0AK */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:TPq0KnuwqccSDCFw */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:rGWWcgWf7_92nfbh */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:AIvPHMtdZiFW1KBC */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:tW-JqPA_9ysTj-yr */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:DnNjy-nIV1R3EQZ8 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:rTRz-KgsGOtHEHkL */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:-uEivpP6WxF5nuKU */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:jxeexo4vnx9-YfqA */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali2fe230144a3 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:dxZjNyJTrOUsA2pK */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:-GgHtYT_YbqR22ki */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:0IzrYwOPbiaFy_vA */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:O5lerV_DFQmz9r6b */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:LAIvDr3wZJG1Rgsh */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:RoX4RvBz4Xwy4T1n */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:7fxao3Eo_P71GDqo */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:korqRds_fvekzeur */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:fxHql9etEnsOiF3y */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali364ce98f041 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:X11059KNy5rxVVrx */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:YWyAM6og3zzzaAaj */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:ez3L33sEq8m0yBIq */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:kgj-79IneFxAftlB */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:LxxT1R_RGP6uoi5I */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:wCQ4o-832EubL8xf */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:xS4hXBkGOzEWN61Q */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:olzJasRlTotbnAIz */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:eD_Mmh2662mOZ179 */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali36db3a7dbe1 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:FZmANOsbx5SSRfAY */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:d-rivQQLrPw8FVYT */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:4px6-I3dt_T5uyXs */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:S4mNNUiJCrqzPLTB */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:0V2swzucJTENoo8s */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:o7u9yslWkmVfqRP9 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Oz2bqbo0kmRqGqQl */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:OLlvm6gLQ_JQWi_n */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:06mGeKkc7tFseB1w */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali38258924007 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:7f_WT59E5ddkFj-J */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:ahCsMxXTI3P6nWYP */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:-rGUpMa27Qngcfcy */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:JDH5oKPrb3NTjyLt */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:GSzyJBdAloR_HVdq */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:9BRn0Crgp_OMlV9K */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:OykWMD3ajSY4p0qK */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:7edNQZDKf3Guf4kY */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:95YYzakuXTScRH-D */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali3a70077d8c5 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:Upv5Hx6Oah_x63P4 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:MJSDKWb80jXV_yea */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:N_62uCvBZlLjKboC */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:rT1MWPvFPEZ5Ew-O */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:-qhjxKmjV6ovGDPe */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:iNHWgMCnS-VuVZ9n */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:PaIrRfCGo6rfKhYr */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:sGovafnl82fzDOve */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:hYTcYgJQlX1bLg8p */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali3c8b1c90f06 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:qiBU8hJkN7PaCYlh */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:S1dpNFyh4iKe3UjL */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:1kjNZfncAwJLBQe3 */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:LALuzE7DqfNgbl7q */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Zu8qcuLC9ccSZxZG */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:ZGkRNj06e1xT_2p5 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:38UPrYL4WZdqqDAW */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:eiZ0mjLve1yp4Wzv */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:vVXoW5t4JAe4oA84 */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali4173d7d0a93 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:aShYtbfwbbPCUbal */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:v7_iNozroKu3akao */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:uOWbtbx-zjDQvzbS */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:oo1z-kY9T2pjOlOG */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:GZrYF3zqwUHafdrL */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:hI9G9qdAkltHjUap */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:oV9IT5pkmcKRJSPY */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:yfD40kWpK_mNxgsl */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:buc5k-yPSX023Qok */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali4c8ed377fe0 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:LRcZC5u9u9ygqE_v */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:K9oF77zD9kkPmS4p */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:K9Zvt_FFDQlix2IF */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:ZYDaLh0VWrpDv6P0 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:rf6dvBEHQCEZzrtg */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:2ghVKc4AM2ozsCih */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:bjPX3hki6WZEoV8e */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:_NlwDAppbNmk4q39 */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:UjGAIjYG8lz4qah1 */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali53a298fdc89 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 6 1049 ACCEPT all -- any any anywhere anywhere /* cali:VkKrrwyBZ1aECXpY */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:glKU24hjYarXJrSG */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:_WYBlLVea5OFNLWE */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.kube-system all -- any any anywhere anywhere /* cali:5_rqB1zWuZ_eSShj */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:qEhg1EunPCe03p0j */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-_u2Tn2rSoAPffvE7JO6 all -- any any anywhere anywhere /* cali:fFZZjdjmiuVlPNb7 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:HrqW9GjlXdtXSFwO */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:GaHygTfaILiQCVCR */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:_Eu7mE-o9_6QQG_g */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali54b1730f3e4 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:lPP0kG0PxgwucaEC */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:CuN1CqLeRSYXY99D */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:HagDq32tovPf5wVP */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:ztYxicD2uyCZ3zjJ */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:AaIe93hTW1oUqURH */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:KlLFv2ztFbDv-fuf */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:w2w95pJXxFRNmPqk */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:oJ5f4DhgmOZuxJyf */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:-u4ZColTL85qI2xt */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali58424ecb876 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:CwVRysCdI9foNVE9 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:UykirTF2Q0na35ND */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:n9wi77kTQyB_7T3J */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:3b8ah1WM8WrY6cwI */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Dd9EBRGIFo2nftx5 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:1Yik4xKqcbgdGbjX */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:2gS5v66wG2VcUGps */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:bNVkoWenNplv7Lnn */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:sY7nCaVX45974301 */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali5a433393f21 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:VJCsVvNttLHqAPlB */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:MzaNFVYyhy91_oOa */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:ygu6KAP7YYlWxeMH */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.calico-system all -- any any anywhere anywhere /* cali:6bkKAhzKNhbeYylM */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:k4-RwOCrSqHby_gN */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-_nzzjLvInId1gPHmQz_ all -- any any anywhere anywhere /* cali:7ignVFWiCylo532c */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:iJeqD_YGLTGOIzgA */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:QoXB0_jY7j-HXpQo */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:4yST8xbKH_-iZnGV */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali697b6656220 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:Tz8UI-sxbLbiySJH */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:t7CPBBqGlYQWJi5F */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:IeRInYDhEw-lTvtc */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:uuaBZxLdzw48ntI- */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:4fv7t2MMxjy7ipZ4 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:16FCnvHxah2hy3V_ */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:InL57fyv6zMUHN5d */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:7ZLuRlB0djVIQG3C */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:HlW65Zwp_QWEy4fU */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali701e7cc6c80 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:QBBweUTQ3jtqy4z0 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:g19zmvKLdg9ucMZV */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:j70EzIVYK1nh072O */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:k8jWj3lJm4oByAHI */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:A9F0Z5xaN4O9WkET */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:vqPtbFqiNN48bx0P */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:2WonGd6cXzIDF3GW */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:oRqaLf2gFveupleO */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:gKD-zZQPi4aQ5YjG */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali71f32e5af89 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:QDTAXbx1PhQ425B2 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:voFBrYY_hDxWT5PH */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:hzXugDQ1ydVtsRjM */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:fk_TDPMXdYuJwGJI */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:fJbxpnyCXxGrOk1N */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:9TwACxetQpr0HMaH */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:P7GpEwPNbmWUKg3Z */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:i6nxfWmEA9_R5AKk */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:JaaN3vZryS-BzQAB */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali732acdb1f64 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:lEFWg6U74lRRdQ1B */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:QATAM3jld2JwFycG */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:-2CRhjCT7ywbFIdB */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:ZkXfDM7HaTUgpbHg */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:MZCNJacCHuL4ceKj */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:oGQIKomKm8_yC9MF */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:KFydbLZCMNYAuA_D */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:bjvEtejpt16b6NwT */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:3fngQp9JHnjo1yO2 */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali77878fe399a (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:Ji2SLKAupJ0c-pGl */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:TgtOcSA10QUorOvL */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:ahHAkIt2YKSV_-xy */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:1TUo1OM9QJLd6Tj9 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:IK7JICczXpYF3L6g */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:ye_K8wN3p7NRWFMJ */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:yviZY0VE72G_jNV_ */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:berXapHEMuOps79J */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:F3EsqgvrcVnDiVu4 */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali7c2f1aa20fb (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:rTLvV1O0bT3JO9qq */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:ItyAFl2XLMvOcYlz */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:gfpJNtJukuNKAJo- */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:yt8dBkkFUvNmVTox */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:okOGMLop-uhSgZD7 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:jB3GE7keHz0DdEsg */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:b6Eg7VBKJ2grl6MB */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:0mE403A-6fi8a6ni */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:xzwOOBHEyG_mtzp7 */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali7f638ed56c0 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:aRlSnPvNyrj8sY_V */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:aQsUR8fMEhMmeRk6 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:4LI3b5ICh8BoipXm */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:2rSMa_0F7hn6Hs8Y */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:9z0FWq9KJJCvQlgw */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:D0MwjmFgLf6vP9U9 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:BHAxrqwMyuv0im3U */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:k57w27QJgnBlnPZV */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:KvpkyyQ0_cdblDOG */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali81738822977 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:CSljCSvc7wtGt96a */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:kJ0w8estGULqSpQl */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:_e3JBAHZHNHN9xSy */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:LC0B6p5z6P4uCpuH */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:G_Pr1FmaUv-ryp0V */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:FugGYwrg6jx19_zn */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:wPN4rjiP9l1T9jCC */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:b0FLZyGYieB4e5Dl */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:MdZZWhHxLHYEezFC */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali82935ebf305 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:Mk89OYblwWxD2fJf */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:YWEFWvXqQ6L6vhUz */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:OEn5brKhfMpyq5M_ */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:rTqvJYTXdoqy6cex */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:UyXLa6AaVHsG3gA9 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:PvOHTwiXkKtB8EiA */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:eb55uMwViY-uEJZW */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:z-58IRzld7o1Lwlq */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:ECqYZryYJShg25Zj */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali87b4909dad4 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:tkNs3aXEQ1dpMSM1 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:Z8tvq_LZLMHZDMdD */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:9pmqPaY3jS8kZi7S */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:9G9-RgKY2GjU1jcJ */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:m4zzBVFYjoiKjN-n */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:RrgUot6FAOMQ_cNe */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:LDfPmIwGGRuJAhyF */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:fhZMFVlMBBtmuwz7 */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:ph3xqls8cZPtKc5K */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali89012b27407 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:lfn6O5s3IIrb9qd_ */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:UzKtPfyiAyC_tMw5 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:xTZrph4miaoj7H1Y */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:M7DEBHsfL2X0BrLU */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:gUR-nJcLJglAxDdd */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:fd3vJ97AMhLn7ptL */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:Xi_-fwT4opXYVIly */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:oljjoVsSAQ4IcLJN */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:--aeSwGKCmJsxDwn */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali992495da41b (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:hcGdANTHXgWd5AQQ */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:hRb9-QT7YcYmxY8z */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:XmuxaU52ovDQ7JTF */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:gsCHXFKIqMHogg5g */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:ZS3tjCyMGstdVP6X */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:WKH__KbNgPjrO4Kr */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:lGnuC7xzz8RBrL6k */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:OC0fGy9OnqhpYTlF */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:n9_JUud8ReWwvlNb */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali9cfc97f0efe (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:7TWVwwY-DMw4oqSh */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:lsu6SZjx7yQN0Unw */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:7SMBzE6lDzqE_UwY */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:ARLCaV8b_Oq6osRp */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:y-tivz8V8z34k314 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:qH5omfx1r4dakXG_ */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:bxiOUsAIm6wcB9wa */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:lOyPZTD1W31HPQ3f */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:Ps5eVWXnarbRWneZ */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali9d339d9a5ab (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:o-a45R9o7iW-GL8e */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:IIyrXx8Qdy1bFKg7 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:rzIqRnK07ORItIrZ */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:L6U6nZQ25EQ90WTu */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:bPBG8IFQivTEui9a */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:muOf_Ljlm7FL7ahD */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:_bKNJEccYKtEsz8u */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:7Sz91KOc7wsHqHbg */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:PBqVVjh0imw2IRcK */ /* Drop if no profiles matched */ | |
| Chain cali-tw-cali9e00d61fdac (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:nRAKak3ksd-eiE8s */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:eT7sY9P7VrpXbW84 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:GM0bw72X0jLEepIi */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:6VH78xZRS5jrFnT3 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:WG7x8t1CuIe_fhlP */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:OhZ_9tWZZUaCJ8af */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:JZ0mMRaCma8MffqZ */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:sy4fF6Vt1K9DsOmF */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:afU0RoYRHYAEI46D */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calia064cfc5be9 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:DelJjj313-vny7Hm */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:7ckj8Cp9j1Qz4are */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:Icb_bwDXP-Xza41_ */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:d96dcZZbOgBA_aSP */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:i4LcOmHOAClkLzSP */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:v8QC1uJg--ebi1qc */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:pM_-UxNY8mihA1en */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:1lCExsOvd4XmLtf0 */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:XIWgcBPUDaGAF0BW */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calia34ee2acd26 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:Jn7bC5ZBdjkuS1sF */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:iggNRsM-EneKznGz */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:WhRnvnwVbfAN0rpr */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:hOHf6E0cqDrxdd76 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:XMFyv5PTqenSlWHA */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:rGhlohgPkAYU9eq7 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:5vVLIRl1eYuV2_sN */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:SpoF58IgHYeA7P0A */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:xOIIpgOGCiy8i_Sl */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calia3a151b9de4 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:qVQC3MlirgTguM4u */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:VT4L5xQVuq7QPFwK */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:wiaBorl5oLP47B3h */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:z5rYZ4Q6TxcGwhRb */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:SmKlF3oe0-XidwI8 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:ME27Ro6vfxYo3-Jw */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:0ynib6cE1UOKm5gn */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:KsqHtw5VCpgS6Aa9 */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:oYIc0HG7HY6J_LCM */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calia906e4bed45 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:GOl0dER7FwF9Yb4T */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:jKslbXJK3PY3qgFY */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:wFUdGBUXkNJ3lUc5 */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:WkZ5Pqf6Z6FZM77s */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:y4tCPEjpZ_lE5-XW */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:tShTQ3T-o5oosRkY */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:cYoULnKGCYv9NRID */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:HAaVceq-5EI5HEEm */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:buK_dO4jeZcyi14R */ /* Drop if no profiles matched */ | |
| Chain cali-tw-caliaf14a7e37b7 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:OYRu7oGkKzFi_lYb */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:06lePObzSRXmwvSg */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:EDm_N3wAIh4mtnxi */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:pbd_jWE8O0u_jxOB */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:TsItTtb47iSIs1A- */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:gkAQ0n7oVyAUfhIi */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:9oP15qJ4kn21dtYc */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:q9agh1AjT3Vg0qYj */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:BE7F2xmqRYw3ODbS */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calib09e260b500 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:GneJUNPKYKgT72Ne */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:DkOjgCipLbrzqgf6 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:B-e5xUeFBlUyaHXV */ MARK and 0xfffcffff | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:s25BOEzlcc_VVggg */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-pi-_YYnSgB46MA1TYU44kJq all -- any any anywhere anywhere /* cali:qqmXAdBSOzDUoZhQ */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:ZzAwkAmkFHpT1BJy */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:nd3h-rzlZDaZ_UJ5 */ mark match 0x0/0x20000 nflog-prefix "DPI|default" nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:hNbiUnCspToetn4y */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pri-kns.calico-system all -- any any anywhere anywhere /* cali:nRruvrK7EF7NAHJ8 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:3s6nqSQ2DNu9v8fI */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-_jtt6i-KVVwZ-74H4ov all -- any any anywhere anywhere /* cali:SzYfPmnkkVocggVx */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:aW6RypLEo-Wbj0E3 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:YH8bMhkMmSU6LFad */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:rUZBx_OXskhN26iL */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calib66b16815ec (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:bBIX15FL0DnyHwQH */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:C1ZcrtAtzdM-vt0U */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:GE-HASHXjyQnJLr_ */ MARK and 0xfffcffff | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:fRn2gjfUQw0CpTfe */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-pi-_U7WUiLyTu5Vc3j6v19u all -- any any anywhere anywhere /* cali:kBALpSVKuwOL-fRO */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:ULyHJtB1sDocEidY */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:eWjzBhTQoUJuiGQ1 */ mark match 0x0/0x20000 nflog-prefix "DPI|default" nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:Ivd58JA_81MGmlxC */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pri-kns.calico-system all -- any any anywhere anywhere /* cali:bdYM4hnKuUZQri_b */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:t1RDOC-l94nzUFsL */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-_eY4Bnp6m80Op5FOwqd all -- any any anywhere anywhere /* cali:pKgZ8el4MifIAYMm */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:TR89VSnor8Shtnve */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:GWzkdliNV_pIcUuM */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:6dxSSx4D3jPl9Vpu */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calib90d52a5748 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:w32NzMKO-uObmJJg */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:Zw4aDb14uv3Jq7Og */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:15r9yLCFbLvYLP5X */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:npVFYn93P2jqQ1Ju */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:FzKcq7eY8tpPsKct */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:zRughUm4Id7392ID */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:-AdIfg2EDg2N-JFO */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:OD8X3nbleHirq0xS */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:EUzREihnjk6ijR5z */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calibe09b1f76bd (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:uQEBw7fzLOgCX4oH */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:qulTiJlbzcGqPyFD */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:jTe8PJSX9hGbZTFH */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:yrXsO0PlufRagidD */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:gxIWJrs6E0h-hZZn */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:wPMSg2zbo_ZAkp2O */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:EL9PbuW9NROdjF4y */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:TghiIK_rGXfnEf7L */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:BcZyjENRAbe033UC */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calic8ab04e10f2 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:LR1GUvu8aJ54FSC5 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:1bO3nF4pQZVtPuD7 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:SdnkgCAhzhs1GoPN */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:OAxU0ssYoTL6BTQt */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:z6b1QJuvKx9M1blL */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:dCVA6au7-dM2YmLt */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:ZplwlELhtI--icpX */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:FkL7Do1Se3qYjX97 */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:Xl62nAxdsHoDy7j2 */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calice4755bda64 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:7W2Yqk6tUwbjJoa3 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:CDrbCucLnHAo3Ye1 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:PXJCn0fF3cY7axV- */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:yDH2LGareRAwevnW */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:crTS4UOSYylvvQ0D */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:Ylkbdo914-mx2uy3 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:-VBUZ7IKuZj5XrU4 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:L9XzVXh2sfCp80c4 */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:AZD6a29Cr3fE8_vP */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calid028379b06c (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:9LMT0SNBT2jvxf_j */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:b89C7du-PD4_xwZ2 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:2IPX4R8H8OBdg-v2 */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:gaXE4wsW9fm6MQQY */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:vhuT6-vAsk6Ers0J */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:KUCuO6VrxovzjDU1 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:YeE-eEAv3qeP00Df */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:N3xyI0N8vBBkkXFE */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:bNIxvhXK3VumORUx */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calid1a9e99aa3f (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:RhKUoERfh5YHhLlb */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:xYA87HJc2tGlP5Wx */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:LV_oVNjeRENhIsHI */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:ZXcrkL5kitfNe0-s */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:pSln5FhaKMjORG39 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:oZDkSB_1IJiUaeIC */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:JMxSbUeT6uUlGiEJ */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:DjU89cgdIazqgCmR */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:m0jwfNcOTD4N8L4_ */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calid22063ed957 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:10pVFcOeKdaFd2kN */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:m0gyOrKPaarHLEM9 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:Eqpy4KrnCMjxdOij */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:ZnGsLHhvsSmVG1i1 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:APJEx-DDkHojqK78 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:DZM_8AjEiLUvXDfN */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:EFqoGKhwwdsV732Z */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:TL81BFIpJuLHGXaP */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:DOsARcsGEuYF9NEs */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calid71ef323b8e (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:3gZPpH8acR_8KptG */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:oIgylGidS_3igpGK */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:rCUerrjS1R6rI3ml */ MARK and 0xfffcffff | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:ZHDjMCB2sSsigcdB */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-pi-_FDiLImilezd09cpg5ci all -- any any anywhere anywhere /* cali:x7-QuJtn5YVHeH9B */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:kWq8WucSgcm1qUK0 */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:fC9xYbn5VJymyIu8 */ mark match 0x0/0x20000 nflog-prefix "DPI|default" nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:XipIxEAg75BC5WxV */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pri-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:BBJ1E_RmGiIEwuxc */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:_zkHJ2kXcVK073LM */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:qZI_8eXxSraXb6C0 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:VI8_Pfts9_PCPPKa */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:oQe4CRQ39Tj9C3LD */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:EsaiDZK0PO7wLi_U */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calidbb100a25d7 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:ndMWIiFGAw5bSpn2 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:Evq51rghUt0loFgc */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:8w5tZcXjulcFoZNX */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:xie_mBgc-hsIWWrH */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:g3MeFUlysOYHZTyJ */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:zkyjxv3yppJMMk2- */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:G1TKgN_y_riUKsYd */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:aEd9so-wGzsV9ouX */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:D4h__s5JHNh_ykfG */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calidd13186f4b4 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:EY-71xdH2aiY8xTQ */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:SsTsZFR6jgulp4sS */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:JoEG7RTj8IcT5jxj */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:RtYwk2CvnsSRCwBr */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:mFH0oveyjkXjH2dY */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:fYlZWz8rtRWUF1PJ */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:rkzDaRnoSUcqpLjz */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:3v1z4xlSl-ZVC-XC */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:IUOvfNyR7Tbsc9Um */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calie09028c913b (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:9UrZqYWMA0dSOX-m */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:EviwmHp_Xqc9NYLz */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:LN4Ksr4_OFfNvSCp */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:YGlK6IVLNQSwUGTX */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:ZnlOQOT5ThVr1aUd */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:owTopjXyGHCsRUjN */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:DpVFuhLpsIe5cCAv */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:IGpjVd8Rgs7mdn3d */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:alM63BR1zsAjI2QS */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calie9d827dd026 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:r9-V47x-gghZ7ylz */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:adzt5bPUM8r2eol7 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:HEYnV77iBZvYzOyJ */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:WEFZ8tjs_S4mKVFO */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:ZVfuwdDSEZoG0EuQ */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:wJck6_aFQyjAz0aq */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:3cg0Ij0iTKini2ZB */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:U8Gj6Zjp4ZMCl1Ey */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:4hRtac0j3QOs5QWm */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calif1b9233c704 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:A8uupWBEzImaltIW */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:ehtldyRsQZRoDhXC */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:FiP-lpomFZraETQ1 */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:EUYCC7DoDDJOTrdw */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:fGsusuFxRhLizTuT */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:LT-oGFCgCmXuT8Md */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:hbEl6StNWNE5D45r */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:d3dLgqxcGZR9S-RE */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:BEzqhiL73sJ8V_xd */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calif57467b0a4f (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:JbgSjxbge4EmYuxB */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:ndQzuTNNlNmlByey */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:06GqXU8QCamwzL2b */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:1i2ennp-1P1TUrmh */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:rIDrOpjcxDM7Ebqh */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:_coGkEaeenLfMqj8 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:wR9y4Ww3wng_uzH0 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:I70Ew9j2p0iXbqqr */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:8ip51NnEE594YHM8 */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calif63fa556511 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:J5iULGt3K8I9gWt9 */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:62YwjXUTbuo3p1gn */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:Xzz_NWZT9Gtfo56v */ MARK and 0xfffcffff | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:Z0XVB40gCwjZgEiz */ /* Start of tier default */ MARK and 0xfffdffff | |
| 0 0 cali-pi-_FDiLImilezd09cpg5ci all -- any any anywhere anywhere /* cali:zrynfSZViyC_CvBq */ mark match 0x0/0x20000 | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:ORmyw12GuSnfv_hr */ /* Return if policy accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:GsuMK9g3bYwKDv4Y */ mark match 0x0/0x20000 nflog-prefix "DPI|default" nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:un4ZrYU2YIJZobbt */ /* End of tier default. Drop if no policies passed packet */ mark match 0x0/0x20000 | |
| 0 0 cali-pri-_kJqfZpgUe7r2t4A-14 all -- any any anywhere anywhere /* cali:j4-jzhGXLgZTGSJR */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:sr7PmgzPdBwzrIYN */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-_4yi5_iSUAwsU8zMHTk all -- any any anywhere anywhere /* cali:xfsEOoPv47_QrR5J */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:kDm37S3mbmEoGlvb */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:v92f8uu8OaOr1hka */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:h-O-GleBmTHcty2A */ /* Drop if no profiles matched */ | |
| Chain cali-tw-calif6838e0d7da (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:AaQt2yABvKetfCzB */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:cRI9X6vx8I-DUbD0 */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:6bYj-wSWWzqY8NCl */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:hE-GqduRI5_ydI69 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:jxWgULgZpkF-jUJN */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:Ae7u-kWojxK-_c04 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:vTqacRneXVtbxftI */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:UeIZfJejYWp1A8u_ */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:Dqi3Do07g5yIrEUY */ /* Drop if no profiles matched */ | |
| Chain cali-tw-califf10b72bf03 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:48zkDQWeIqonMnlg */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:JtLn5hgA-tC0xh0P */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:NtCv2yoKiJrL3eTa */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:uknO5wr52L-ByT3D */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:l2sbsrEntLnz9ZkQ */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:Zyk0pPa2aqU1TnTw */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:fyzG6oKRrf17Fg-F */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:urCkaVCCUBu88OYt */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:-cmbKWt812uDeMZn */ /* Drop if no profiles matched */ | |
| Chain cali-tw-califf64fe2b1c6 (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 0 0 ACCEPT all -- any any anywhere anywhere /* cali:OL9oBIRluMtm_oMK */ ctstate RELATED,ESTABLISHED | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:VRdYzL0GET1Ved5Y */ ctstate INVALID | |
| 0 0 MARK all -- any any anywhere anywhere /* cali:MaJ-UVRw8_9cf1O4 */ MARK and 0xfffcffff | |
| 0 0 cali-pri-kns.test1 all -- any any anywhere anywhere /* cali:5_snxAhQcrnZlcGY */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:ijhQDxlJ6YUdCwq6 */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 cali-pri-ksa.test1.default all -- any any anywhere anywhere /* cali:LO_0BXlCEimY1Wi7 */ | |
| 0 0 RETURN all -- any any anywhere anywhere /* cali:NjTDy_b7ME7HshMt */ /* Return if profile accepted */ mark match 0x10000/0x10000 | |
| 0 0 NFLOG all -- any any anywhere anywhere /* cali:Zqi5AT6M-UUaX1_E */ nflog-prefix DRI nflog-group 1 nflog-size 80 | |
| 0 0 DROP all -- any any anywhere anywhere /* cali:cKrIAr9Tbo7E26LH */ /* Drop if no profiles matched */ | |
| Chain cali-wl-to-host (1 references) | |
| pkts bytes target prot opt in out source destination | |
| 55M 9500M cali-from-wl-dispatch all -- any any anywhere anywhere /* cali:Ee9Sbo10IpVujdIY */ | |
| 32007 1920K ACCEPT all -- any any anywhere anywhere /* cali:nSZbcOoG1xPONxb8 */ /* Configured DefaultEndpointToHostAction */ |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment