Chain INPUT (policy ACCEPT) target prot opt source destination moblock_in all -- anywhere anywhere state NEW MARK match !0x14 Chain FORWARD (policy ACCEPT) target prot opt source destination DROP all -- anywhere anywhere MARK match 0xa moblock_fw all -- anywhere anywhere state NEW MARK match !0x14 Chain OUTPUT (policy ACCEPT) target prot opt source destination REJECT all -- anywhere anywhere MARK match 0xa reject-with icmp-port-unreachable moblock_out all -- anywhere anywhere state NEW MARK match !0x14 Chain moblock_fw (1 references) target prot opt source destination NFQUEUE all -- anywhere anywhere NFQUEUE num 0 Chain moblock_in (1 references) target prot opt source destination RETURN all -- anywhere anywhere NFQUEUE all -- anywhere anywhere NFQUEUE num 0 Chain moblock_out (1 references) target prot opt source destination RETURN all -- anywhere anywhere NFQUEUE all -- anywhere anywhere NFQUEUE num 0