| F | Chain | Action | In-interface | Protocol | Src-address | Src-port | Dst-address | Dst-port | Hotspot | 
|---|
| D | 
forward | 
  jump | hs-unauth | 
 | 
 | 
 | 
 | 
 | 
 | 
from-client,!auth | 
| D | 
forward | 
  jump | hs-unauth-to | 
 | 
 | 
 | 
 | 
 | 
 | 
to-client,!auth | 
| D | 
input | 
  jump | hs-input | 
 | 
 | 
 | 
 | 
 | 
 | 
from-client | 
| D | 
hs-input | 
  jump | pre-hs-input | 
 | 
 | 
 | 
 | 
 | 
 | 
 | 
| D | 
hs-input | 
  accept | 
 | 
Udp | 
 | 
 | 
 | 
64872 | 
 | 
| D | 
hs-input | 
  accept | 
 | 
Tcp | 
 | 
 | 
 | 
64872-64875 | 
 | 
| D | 
hs-input | 
  jump | hs-unauth | 
 | 
 | 
 | 
 | 
 | 
 | 
!auth | 
| D | 
hs-unauth | 
  return | 
 | 
Tcp | 
 | 
 | 
89.140.2.1 | 
53 | 
 | 
| D | 
hs-unauth | 
  return | 
 | 
Udp | 
 | 
 | 
89.140.2.1 | 
53 | 
 | 
| D | 
hs-unauth | 
  return | 
 | 
Tcp | 
 | 
 | 
80.58.0.33 | 
53 | 
 | 
| D | 
hs-unauth | 
  return | 
 | 
Udp | 
 | 
 | 
80.58.0.33 | 
53 | 
 | 
| D | 
hs-unauth | 
  return | 
 | 
Tcp | 
 | 
 | 
80.58.32.97 | 
53 | 
 | 
| D | 
hs-unauth | 
  reject | tcp-reset | 
 | 
Tcp | 
 | 
 | 
 | 
 | 
 | 
| D | 
hs-unauth | 
  reject | icmp-net-prohibited | 
 | 
 | 
 | 
 | 
 | 
 | 
 | 
| D | 
hs-unauth-to | 
  return | 
 | 
Tcp | 
89.140.2.1 | 
53 | 
 | 
 | 
 | 
| D | 
hs-unauth-to | 
  return | 
 | 
Udp | 
89.140.2.1 | 
53 | 
 | 
 | 
 | 
| D | 
hs-unauth-to | 
  return | 
 | 
Tcp | 
80.58.0.33 | 
53 | 
 | 
 | 
 | 
| D | 
hs-unauth-to | 
  return | 
 | 
Udp | 
80.58.0.33 | 
53 | 
 | 
 | 
 | 
| D | 
hs-unauth-to | 
  return | 
 | 
Tcp | 
80.58.32.97 | 
53 | 
 | 
 | 
 | 
| D | 
hs-unauth-to | 
  reject | icmp-host-prohibited | 
 | 
 | 
 | 
 | 
 | 
 | 
 | 
 
| XI | 
unused-hs-chain | 
  passthrough | 
 | 
 | 
 | 
 | 
 | 
 | 
 | 
 | 
pre-hs-input | 
  accept | 
 | 
 | 
 | 
 | 
 | 
 | 
 | 
 | 
forward | 
  log |  | 
 | 
 | 
1.1.1.1 | 
 | 
 | 
 | 
 | 
 | 
forward | 
  add-dst-to-address-list |  | 00:00:00 | 
 | 
 | 
1.1.1.1 | 
 | 
 | 
 | 
 | 
 | 
forward | 
  add-src-to-address-list |  | 00:00:00 | 
 | 
 | 
1.1.1.1 | 
 | 
 | 
 | 
 | 
 | 
forward | 
  reject | icmp-network-unreachable | 
 | 
 | 
1.1.1.1 | 
 | 
 | 
 | 
 | 
 | 
forward | 
  tarpit | 
 | 
Tcp | 
1.1.1.1 | 
 | 
 | 
 | 
 | 
 | 
forward | 
  passthrough | 
 | 
Tcp | 
1.1.1.1 | 
 | 
 | 
 | 
 | 
| I | 
forward | 
  passthrough | 
(unknown) | 
Tcp | 
1.1.1.1 | 
 | 
 | 
 | 
 |