# gre-panel:managed=1
#
# The panel's port forwarding rules for IPv6, rendered from the database.
# Restored with --noflush against the panel's own chains only: no other chain on
# this host is read, flushed or reordered, and no whole-system snapshot is ever
# taken, and the distribution's firewall persistence package is deliberately unused.
#
# Each chain is declared so it exists, then flushed explicitly, because --noflush
# leaves an existing chain's rules in place. The jump rules that reach these
# chains are installed separately, checked before they are added, so a second
# apply cannot duplicate them.
#
# Every rule carries the comment grep:<RouteRuleID>, which is what lets a rule read
# back from the kernel be matched to the database row that generated it.

*mangle
:GRE_PANEL_MARK - [0:0]
:GRE_PANEL_MSS - [0:0]
-F GRE_PANEL_MARK
-F GRE_PANEL_MSS
COMMIT
*nat
:GRE_PANEL_PRE - [0:0]
:GRE_PANEL_OUT - [0:0]
:GRE_PANEL_POST - [0:0]
-F GRE_PANEL_PRE
-F GRE_PANEL_OUT
-F GRE_PANEL_POST
COMMIT
*filter
:GRE_PANEL_ACCT - [0:0]
:GRE_PANEL_FWD - [0:0]
-F GRE_PANEL_ACCT
-F GRE_PANEL_FWD
COMMIT