Chain DEFENSE (2 references) num pkts bytes target prot opt in out source destination 1 15764 1166561 SET all -- * * 0.0.0.0/0 0.0.0.0/0 match-set banperm src add-set banperm src 2 7778 602277 RETURN udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:53 match-set banperm src limit: avg */sec burst * 3 6165 473063 LOG udp -- * * 0.0.0.0/0 0.0.0.0/0 match-set banperm src udp dpt:53 LOG flags 0 level 4 prefix "AFA05 DEFENSE-DNS-PERM " 4 6165 473063 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 match-set banperm src udp dpt:53 5 1481 71030 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 match-set banperm src limit: avg */sec burst 1 LOG flags 0 level 4 prefix "AFA20 DEFENSE BANPERM" 6 0 0 LOG udp -- * * 0.0.0.0/0 0.0.0.0/0 match-set softban src udp dpt:53 LOG flags 0 level 4 prefix "AFA05 DEFENSE-DNS-SOFT " 7 0 0 DROP udp -- * * 0.0.0.0/0 0.0.0.0/0 match-set softban src udp dpt:53 8 1821 91221 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 match-set banperm src 9 0 0 SET all -- * * 0.0.0.0/0 0.0.0.0/0 match-set softban src add-set softban src 10 0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 match-set softban src limit: avg 1/sec burst 1 LOG flags 0 level 4 prefix "AFA21 DEFENSE SOFT" 11 0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 match-set softban src 12 4644 315452 RETURN all -- * * 0.0.0.0/0 0.0.0.0/0