# ferm rules generated by import-ferm
# http://ferm.foo-projects.org/
domain ip {
    table mangle {
        chain PREROUTING policy ACCEPT;
        chain INPUT policy ACCEPT;
        chain FORWARD policy ACCEPT;
        chain OUTPUT policy ACCEPT;
        chain POSTROUTING policy ACCEPT;
    }
    table nat {
        chain PREROUTING policy ACCEPT;
        chain POSTROUTING policy ACCEPT;
        chain OUTPUT policy ACCEPT;
    }
    table filter {
        chain INPUT policy DROP;
        chain FORWARD policy DROP;
        chain OUTPUT policy ACCEPT;
        chain PUB_IN;
        chain PUB_OUT;
        chain INPUT {
            mod state NOP {
                state INVALID NOP {
                    ULOG ulog-prefix INVALID:;
                    DROP;
                }
                state (RELATED ESTABLISHED) ACCEPT;
            }
            fragment NOP {
                ULOG ulog-prefix FRAGMENT:;
                DROP;
            }
            goto PUB_IN;
            daddr 127.0.0.1 ACCEPT;
        }
        chain OUTPUT {
            saddr 127.0.0.1 ACCEPT;
            goto PUB_OUT;
            ACCEPT;
        }
        chain PUB_IN {
            proto tcp dport (50557 44662 42234:42244 1024:1044 113) ACCEPT;
            proto udp dport (50557 44665 44672) ACCEPT;
            proto tcp NOP {
                saddr 85.17.16.10 dport 64172 ACCEPT;
                dport 4662 ACCEPT;
            }
            proto udp dport (4672 4665) ACCEPT;
            proto tcp dport 50000 ACCEPT;
        }
        chain PUB_OUT {
            ACCEPT;
        }
    }
}