# Generated by iptables-save v1.4.10 on Mon Jan 31 03:03:38 2011 *mangle :PREROUTING ACCEPT [0:0] :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] :QATEST - [0:0] -A QATEST -p ah -m ah --ahspi 1 -A QATEST -p ah -m ah --ahspi :2 -A QATEST -p ah -m ah --ahspi 0:3 -A QATEST -p ah -m ah --ahspi 4: -A QATEST -p ah -m ah --ahspi 5:4294967295 -A QATEST -p tcp -j ECN --ecn-tcp-remove -A QATEST -j LOG --log-prefix "hi" --log-tcp-sequence --log-tcp-options --log-ip-options --log-uid --log-macdecode -A QATEST -j TTL --ttl-inc 1 -A QATEST -j TTL --ttl-dec 1 -A QATEST -j TTL --ttl-set 1 -A QATEST -j NFLOG --nflog-prefix "abc" --nflog-range 2 --nflog-threshold 2 -A QATEST -p tcp -j TPROXY --on-port 12345 --on-ip 10.0.0.1 --tproxy-mark 23/0xff COMMIT