*mangle :PREROUTING ACCEPT [6345862:612796765] :INPUT ACCEPT [319925:23701204] :FORWARD ACCEPT [6025902:589092107] :OUTPUT ACCEPT [329353:83794935] :POSTROUTING ACCEPT [6355262:672887092] -A POSTROUTING -o ppp0 -p tcp -m tcp --dport 4662 -j CLASSIFY --set-class 1:27 -A POSTROUTING -o ppp0 -p tcp -m tcp --sport 4662 -j CLASSIFY --set-class 1:27 -A POSTROUTING -o ppp0 -p tcp -m tcp --sport 6881 -j CLASSIFY --set-class 1:27 -A POSTROUTING -o ppp0 -p tcp -m tcp --dport 6881 -j CLASSIFY --set-class 1:27 -A POSTROUTING -o ppp0 -p tcp -m tcp --sport 10000:65535 --dport 10000:65535 -j CLASSIFY --set-class 1:27 -A POSTROUTING -o ppp0 -p icmp -j CLASSIFY --set-class 1:20 -A POSTROUTING -o ppp0 -p udp -m udp --dport 53 -j CLASSIFY --set-class 1:20 -A POSTROUTING -o ppp0 -p tcp -m tcp --dport 53 -j CLASSIFY --set-class 1:20 -A POSTROUTING -o ppp0 -p tcp -m tcp --syn -m length --length 40:68 -j CLASSIFY --set-class 1:23 -A POSTROUTING -o ppp0 -p tcp -m tcp --tcp-flags ALL SYN,ACK -m length --length 40:68 -j CLASSIFY --set-class 1:23 -A POSTROUTING -o ppp0 -p tcp -m tcp --tcp-flags ALL ACK -m length --length 40:100 -j CLASSIFY --set-class 1:23 -A POSTROUTING -o ppp0 -p tcp -m tcp --tcp-flags ALL RST -j CLASSIFY --set-class 1:23 -A POSTROUTING -o ppp0 -p tcp -m tcp --tcp-flags ALL ACK,RST -j CLASSIFY --set-class 1:23 -A POSTROUTING -o ppp0 -p tcp -m tcp --tcp-flags ALL ACK,FIN -j CLASSIFY --set-class 1:23 -A POSTROUTING -o ppp0 -p udp -m udp --dport 53 -j CLASSIFY --set-class 1:21 -A POSTROUTING -o ppp0 -p tcp -m tcp --dport 22 -j CLASSIFY --set-class 1:22 -A POSTROUTING -o ppp0 -p tcp -m tcp --sport 22 -j CLASSIFY --set-class 1:22 -A POSTROUTING -o ppp0 -p udp -m udp --sport 500 -m length --length 40:150 -j CLASSIFY --set-class 1:22 -A POSTROUTING -o ppp0 -p udp -m udp --dport 500 -m length --length 40:150 -j CLASSIFY --set-class 1:22 -A POSTROUTING -o ppp0 -p 50 -m length --length 40:150 -j CLASSIFY --set-class 1:22 -A POSTROUTING -j CLASSIFY --set-class 1:24 COMMIT