[Bug] nftables IPv6 tproxy规则无法添加，导致外部访问路由器IPv6端口的流量只进不出

kfstorm commented 1 year ago

Verify Steps

[X] Tracker 我已经在 Issue Tracker 中找过我要提出的问题
[X] Latest 我已经使用最新 Dev 版本测试过，问题依旧存在
[X] Core 这是 OpenClash 存在的问题，并非我所使用的 Clash 或 Meta 等内核的特定问题
[X] Meaningful 我提交的不是无意义的催促更新或修复请求

OpenClash Version

N/A

Bug on Environment

Official OpenWrt

Bug on Platform

Linux-arm64

To Reproduce

在M1 mac上使用OpenWrt官方教程通过qemu启动一个OpenWrt虚拟机（aarch64架构）（https://openwrt.org/docs/guide-user/virtualization/qemu）：

OPENWRT_VERSION=22.03.5
FILESYSTEM=ext4

wget https://downloads.openwrt.org/releases/$OPENWRT_VERSION/targets/armvirt/64/openwrt-$OPENWRT_VERSION-armvirt-64-Image
wget https://downloads.openwrt.org/releases/$OPENWRT_VERSION/targets/armvirt/64/openwrt-$OPENWRT_VERSION-armvirt-64-rootfs-$FILESYSTEM.img.gz
gunzip -k openwrt-$OPENWRT_VERSION-armvirt-64-rootfs-$FILESYSTEM.img.gz
qemu-system-aarch64 -m 1024 -smp 2 -cpu host -M virt,highmem=off \
    -nographic \
    -accel hvf \
    -kernel openwrt-$OPENWRT_VERSION-armvirt-64-Image \
    -drive file=openwrt-$OPENWRT_VERSION-armvirt-64-rootfs-$FILESYSTEM.img,format=raw,if=virtio \
    -append root=/dev/vda \
    -device virtio-net,netdev=net0 -netdev user,id=net0,net=192.168.1.0/24,hostfwd=tcp:127.0.0.1:1122-192.168.1.1:22,hostfwd=tcp:127.0.0.1:8080-192.168.1.1:80 \
    -device virtio-net,netdev=net1 -netdev user,id=net1,net=192.0.2.0/24,ipv6-net='2001:db8::/64'

虚拟机内安装OpenClash指定的依赖：

opkg update
opkg remove dnsmasq
opkg install coreutils-nohup bash dnsmasq-full curl ca-certificates ipset ip-full libcap libcap-bin ruby ruby-yaml kmod-tun kmod-inet-diag unzip kmod-nft-tproxy luci-compat luci luci-base

模拟OpenClash的逻辑添加IPv6防火墙规则：

/etc/init.d/firewall restart
nft 'add chain inet fw4 openclash_mangle_output_v6'
nft 'add rule inet fw4 openclash_mangle_output_v6 meta nfproto ipv6 meta skuid != 65534 tcp dport 0-65535 meta mark set 0x00000162 tproxy ip6 to :7895 counter accept comment "OpenClash TCP Tproxy"'
nft 'add rule inet fw4 mangle_output meta nfproto {ipv6} counter jump openclash_mangle_output_v6'

上面的脚本在最后一步会报错：

Error: Could not process rule: Not supported
add rule inet fw4 mangle_output meta nfproto {ipv6} counter jump openclash_mangle_output_v6
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

如果把tproxy ip6 to :7895这一段删掉，添加防火墙规则就可以成功。

Describe the Bug

Rule container chain "input_wan"中能看到我开放的端口有流量命中，但openclash_mangle_output_v6里的所有规则流量都是0。而且Route action chain "mangle_output"中没有openclash_mangle_output_v6。

合理怀疑是防火墙规则添加失败，查看了OpenClash的脚本后，尝试手动添加防火墙规则，发现确实会添加失败。

如果先把tproxy的规则添加到openclash_mangle_output_v6中，那么把openclash_mangle_output_v6添加到mangle_output这一步就会失败。报错"Error: Could not process rule: Not supported"。（这是OpenClash的顺序）
如果先把openclash_mangle_output_v6添加到mangle_output中，那么把tproxy的规则添加到openclash_mangle_output_v6这一步就会失败。报错"Error: Could not process rule: Not supported"。（这是我上面复现步骤的顺序）

但是我不知道根本原因是什么。是不是少装了什么包。我之前用的是OpenWrt 21.02.1（firewall3），这两天刚升级到22.03.5（firewall4），发现了这个问题。

OpenClash Log

OpenClash 调试日志

生成时间: 2023-08-16 12:34:29 插件版本: 隐私提示: 上传此日志前请注意检查、屏蔽公网IP、节点、密码等相关敏感信息



#===================== 系统信息 =====================#

主机型号: FriendlyElec NanoPi R4S
固件版本: OpenWrt 22.03.5 r20134-5f15225c1e
LuCI版本: 
内核版本: 5.10.176
处理器架构: 

#此项有值时,如不使用IPv6,建议到网络-接口-lan的设置中禁用IPV6的DHCP
IPV6-DHCP: 

DNS劫持: Dnsmasq 转发
#DNS劫持为Dnsmasq时，此项结果应仅有配置文件的DNS监听地址
Dnsmasq转发设置: 127.0.0.1#7874

#===================== 依赖检查 =====================#

dnsmasq-full: 未安装
coreutils: 未安装
coreutils-nohup: 已安装
bash: 已安装
curl: 已安装
ca-certificates: 已安装
ipset: 已安装
ip-full: 已安装
libcap: 已安装
libcap-bin: 已安装
ruby: 已安装
ruby-yaml: 已安装
ruby-psych: 已安装
ruby-pstore: 已安装
kmod-tun(TUN模式): 已安装
luci-compat(Luci >= 19.07): 已安装
kmod-inet-diag(PROCESS-NAME): 已安装
unzip: 已安装
kmod-nft-tproxy: 已安装

#===================== 内核检查 =====================#

运行状态: 运行中
运行内核：TUN
进程pid: 29090
运行权限: 29090: cap_dac_override,cap_net_bind_service,cap_net_admin,cap_net_raw,cap_sys_ptrace,cap_sys_resource=eip
运行用户: 
已选择的架构: linux-arm64

#下方无法显示内核版本号时请确认您的内核版本是否正确或者有无权限
Tun内核版本: 2023.06.30
Tun内核文件: 存在
Tun内核运行权限: 正常

Dev内核版本: v1.17.0
Dev内核文件: 存在
Dev内核运行权限: 正常

Meta内核版本: alpha-g0b1aff5
Meta内核文件: 存在
Meta内核运行权限: 正常

#===================== 插件设置 =====================#

当前配置文件: /etc/openclash/config/config.yaml
启动配置文件: /etc/openclash/config.yaml
运行模式: fake-ip-tun
默认代理模式: rule
UDP流量转发(tproxy): 停用
自定义DNS: 停用
IPV6代理: 启用
IPV6-DNS解析: 启用
禁用Dnsmasq缓存: 启用
自定义规则: 停用
仅允许内网: 停用
仅代理命中规则流量: 停用
仅允许常用端口流量: 停用
绕过中国大陆IP: 停用
路由本机代理: 启用

#启动异常时建议关闭此项后重试
混合节点: 停用
保留配置: 停用

#启动异常时建议关闭此项后重试
第三方规则: 停用

#===================== 配置文件 =====================#

ipv6: true
dns:
  enable: true
  ipv6: true
  nameserver:
  - xxxxxxxx
  - xxxxxxxx
  fake-ip-filter:
  - "*.msftconnecttest.com"
  - "*.msftncsi.com"
  - "*.srv.nintendo.net"
  - "*.stun.playstation.net"
  - xbox.*.microsoft.com
  - "*.xboxlive.com"
  - "*.logon.battlenet.com.cn"
  - "*.logon.battle.net"
  - stun.l.google.com
  - "*.lan"
  - "*.localdomain"
  - "*.example"
  - "*.invalid"
  - "*.localhost"
  - "*.test"
  - "*.local"
  - "*.home.arpa"
  - time.*.com
  - time.*.gov
  - time.*.edu.cn
  - time.*.apple.com
  - time1.*.com
  - time2.*.com
  - time3.*.com
  - time4.*.com
  - time5.*.com
  - time6.*.com
  - time7.*.com
  - ntp.*.com
  - ntp1.*.com
  - ntp2.*.com
  - ntp3.*.com
  - ntp4.*.com
  - ntp5.*.com
  - ntp6.*.com
  - ntp7.*.com
  - "*.time.edu.cn"
  - "*.ntp.org.cn"
  - "+.pool.ntp.org"
  - time1.cloud.tencent.com
  - music.163.com
  - "*.music.163.com"
  - "*.126.net"
  - musicapi.taihe.com
  - music.taihe.com
  - songsearch.kugou.com
  - trackercdn.kugou.com
  - "*.kuwo.cn"
  - api-jooxtt.sanook.com
  - api.joox.com
  - joox.com
  - y.qq.com
  - "*.y.qq.com"
  - streamoc.music.tc.qq.com
  - mobileoc.music.tc.qq.com
  - isure.stream.qqmusic.qq.com
  - dl.stream.qqmusic.qq.com
  - aqqmusic.tc.qq.com
  - amobile.music.tc.qq.co
  - "*.xiami.com"
  - "*.music.migu.cn"
  - music.migu.cn
  - "*.msftconnecttest.com"
  - "*.msftncsi.com"
  - msftconnecttest.com
  - msftncsi.com
  - localhost.ptlogin2.qq.com
  - localhost.sec.qq.com
  - "+.srv.nintendo.net"
  - "+.stun.playstation.net"
  - xbox.*.microsoft.com
  - xnotify.xboxlive.com
  - "+.battlenet.com.cn"
  - "+.wotgame.cn"
  - "+.wggames.cn"
  - "+.wowsgame.cn"
  - "+.wargaming.net"
  - proxy.golang.org
  - stun.*.*
  - stun.*.*.*
  - "+.stun.*.*"
  - "+.stun.*.*.*"
  - "+.stun.*.*.*.*"
  - heartbeat.belkin.com
  - "*.linksys.com"
  - "*.linksyssmartwifi.com"
  - "*.router.asus.com"
  - mesu.apple.com
  - swscan.apple.com
  - swquery.apple.com
  - swdownload.apple.com
  - swcdn.apple.com
  - swdist.apple.com
  - lens.l.google.com
  - stun.l.google.com
  - "+.nflxvideo.net"
  - "*.square-enix.com"
  - "*.finalfantasyxiv.com"
  - "*.ffxiv.com"
  enhanced-mode: fake-ip
  fake-ip-range: 198.18.0.1/16
  listen: 0.0.0.0:7874
rule-providers:
  reject:
    type: http
    behavior: domain
    url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/reject.txt
    path: "./rule_provider/reject.yaml"
    interval: 86400
  icloud:
    type: http
    behavior: domain
    url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/icloud.txt
    path: "./rule_provider/icloud.yaml"
    interval: 86400
  apple:
    type: http
    behavior: domain
    url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/apple.txt
    path: "./rule_provider/apple.yaml"
    interval: 86400
  google:
    type: http
    behavior: domain
    url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/google.txt
    path: "./rule_provider/google.yaml"
    interval: 86400
  proxy:
    type: http
    behavior: domain
    url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/proxy.txt
    path: "./rule_provider/proxy.yaml"
    interval: 86400
  direct:
    type: http
    behavior: domain
    url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/direct.txt
    path: "./rule_provider/direct.yaml"
    interval: 86400
  private:
    type: http
    behavior: domain
    url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/private.txt
    path: "./rule_provider/private.yaml"
    interval: 86400
  gfw:
    type: http
    behavior: domain
    url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/gfw.txt
    path: "./rule_provider/gfw.yaml"
    interval: 86400
  greatfire:
    type: http
    behavior: domain
    url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/greatfire.txt
    path: "./rule_provider/greatfire.yaml"
    interval: 86400
  tld-not-cn:
    type: http
    behavior: domain
    url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/tld-not-cn.txt
    path: "./rule_provider/tld-not-cn.yaml"
    interval: 86400
  telegramcidr:
    type: http
    behavior: ipcidr
    url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/telegramcidr.txt
    path: "./rule_provider/telegramcidr.yaml"
    interval: 86400
  cncidr:
    type: http
    behavior: ipcidr
    url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/cncidr.txt
    path: "./rule_provider/cncidr.yaml"
    interval: 86400
  lancidr:
    type: http
    behavior: ipcidr
    url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/lancidr.txt
    path: "./rule_provider/lancidr.yaml"
    interval: 86400
  applications:
    type: http
    behavior: classical
    url: https://cdn.jsdelivr.net/gh/Loyalsoldier/clash-rules@release/applications.txt
    path: "./rule_provider/applications.yaml"
    interval: 86400
  youtube:
    type: http
    behavior: classical
    path: "./rule_provider/streaming.yaml"
    url: https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/YouTube/YouTube.yaml
    interval: 86400
  streaming:
    type: http
    behavior: classical
    path: "./rule_provider/streaming.yaml"
    url: https://cdn.jsdelivr.net/gh/tututo/Profiles@master/Clash/RuleSet/StreamingMedia/Streaming.yaml
    interval: 86400
  speedtest:
    type: http
    behavior: classical
    path: "./rule_provider/speedtest.yaml"
    url: https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Speedtest/Speedtest.yaml
    interval: 86400
  pt:
    type: http
    behavior: classical
    path: "./rule_provider/pt.yaml"
    url: https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/PrivateTracker/PrivateTracker.yaml
    interval: 86400
  game-download:
    type: http
    behavior: classical
    path: "./rule_provider/game-download.yaml"
    url: https://cdn.jsdelivr.net/gh/blackmatrix7/ios_rule_script@master/rule/Clash/Game/GameDownloadCN/GameDownloadCN.yaml
    interval: 86400
script:
  shortcuts:
    github-ssh: dst_port == 22 and host == 'github.com'
rules:
- DST-PORT,7895,REJECT
- DST-PORT,7892,REJECT
- IP-CIDR,198.18.0.1/16,REJECT,no-resolve
- DOMAIN-SUFFIX,plex.tv,DIRECT
- PROCESS-NAME,transmission-daemon,DIRECT
- RULE-SET,applications,DIRECT
- DOMAIN-SUFFIX,storage.live.com,DIRECT
- DOMAIN-SUFFIX,steamcontent.com,DIRECT
- DOMAIN-KEYWORD,epicgames-download,DIRECT
- RULE-SET,speedtest,DIRECT
- DOMAIN-SUFFIX,ls.apple.com,DIRECT
- DOMAIN-SUFFIX,openai.com,maga
- DOMAIN-SUFFIX,kfstorm.com,DIRECT
- DOMAIN-SUFFIX,ipify.org,DIRECT
- SCRIPT,github-ssh,non-ZHS
- RULE-SET,pt,DIRECT
- DOMAIN-SUFFIX,ultrahd.net,DIRECT
- DOMAIN-SUFFIX,carpt.net,DIRECT
- DOMAIN-SUFFIX,hdmayi.com,DIRECT
- DOMAIN-SUFFIX,0ff.cc,DIRECT
- DOMAIN,clash.razord.top,DIRECT
- DOMAIN,yacd.haishan.me,DIRECT
- RULE-SET,private,DIRECT
- RULE-SET,reject,REJECT
- RULE-SET,icloud,DIRECT
- RULE-SET,apple,DIRECT
- RULE-SET,game-download,DIRECT
- RULE-SET,youtube,youtube
- RULE-SET,streaming,streaming
- RULE-SET,proxy,default
- RULE-SET,direct,DIRECT
- RULE-SET,lancidr,DIRECT
- RULE-SET,cncidr,DIRECT
- RULE-SET,telegramcidr,default
- GEOIP,LAN,DIRECT
- GEOIP,CN,DIRECT
- DST-PORT,22,non-ZHS
- IP-CIDR6,::/0,non-ZHS
- MATCH,default
proxy-groups:
- name: ".manual"
  type: select
  proxies: &1
  - happy
  - maga
  use:
  - zhs
  interval: 60
  lazy: false
- name: ".fast"
  type: url-test
  proxies: *1
  use:
  - zhs
  interval: 60
  lazy: false
  url: http://www.gstatic.com/generate_204
  tolerance: 50
- name: ".load-balance"
  type: load-balance
  proxies: *1
  use:
  - zhs
  interval: 60
  lazy: false
  url: http://www.gstatic.com/generate_204
  strategy: consistent-hashing
- name: default
  type: select
  proxies:
  - ".manual"
  - ".fast"
  - ".load-balance"
  - DIRECT
  interval: 60
  lazy: false
- name: youtube
  type: select
  proxies:
  - ".manual"
  - ".fast"
  - ".load-balance"
  interval: 60
  lazy: false
- name: streaming
  type: select
  proxies:
  - ".manual"
  - ".fast"
  - ".load-balance"
  interval: 60
  lazy: false
- name: non-ZHS
  type: select
  proxies:
  - happy
  - maga
  - DIRECT
  interval: 60
  lazy: false
redir-port: 7892
tproxy-port: 7895
port: 7890
socks-port: 7891
mixed-port: 7893
mode: rule
log-level: silent
allow-lan: true
external-controller: 0.0.0.0:9090
bind-address: "*"
external-ui: "/usr/share/openclash/ui"
experimental:
  sniff-tls-sni: true
tun:
  enable: true
  stack: system
  auto-route: false
  auto-detect-interface: false
  dns-hijack:
  - tcp://any:53
profile:
  store-selected: true
  store-fake-ip: true
authentication:
- xxxxxxxx

#===================== 自定义覆写设置 =====================#

#!/bin/sh
. /usr/share/openclash/ruby.sh
. /usr/share/openclash/log.sh
. /lib/functions.sh

# This script is called by /etc/init.d/openclash
# Add your custom overwrite scripts here, they will be take effict after the OpenClash own srcipts

LOG_OUT "Tip: Start Running Custom Overwrite Scripts..."
LOGTIME=$(echo $(date "+%Y-%m-%d %H:%M:%S"))
LOG_FILE="/tmp/openclash.log"
CONFIG_FILE="$1" #config path

#Simple Demo:
    #General Demo
    #1--config path
    #2--key name
    #3--value
    #ruby_edit "$CONFIG_FILE" "['redir-port']" "7892"
    #ruby_edit "$CONFIG_FILE" "['secret']" "123456"
    #ruby_edit "$CONFIG_FILE" "['dns']['enable']" "true"

    #Hash Demo
    #1--config path
    #2--key name
    #3--hash type value
    #ruby_edit "$CONFIG_FILE" "['experimental']" "{'sniff-tls-sni'=>true}"
    #ruby_edit "$CONFIG_FILE" "['sniffer']" "{'sniffing'=>['tls','http']}"

    #Array Demo:
    #1--config path
    #2--key name
    #3--position(start from 0, end with -1)
    #4--value
    #ruby_arr_insert "$CONFIG_FILE" "['dns']['nameserver']" "0" "114.114.114.114"

    #Array Add From Yaml File Demo:
    #1--config path
    #2--key name
    #3--position(start from 0, end with -1)
    #4--value file path
    #5--value key name in #4 file
    #ruby_arr_add_file "$CONFIG_FILE" "['dns']['fallback-filter']['ipcidr']" "0" "/etc/openclash/custom/openclash_custom_fallback_filter.yaml" "['fallback-filter']['ipcidr']"

#Ruby Script Demo:
    #ruby -ryaml -rYAML -I "/usr/share/openclash" -E UTF-8 -e "
    #   begin
    #      Value = YAML.load_file('$CONFIG_FILE');
    #   rescue Exception => e
    #      puts '${LOGTIME} Error: Load File Failed,【' + e.message + '】';
    #   end;

        #General
    #   begin
    #   Thread.new{
    #      Value['redir-port']=7892;
    #      Value['tproxy-port']=7895;
    #      Value['port']=7890;
    #      Value['socks-port']=7891;
    #      Value['mixed-port']=7893;
    #   }.join;

    #   rescue Exception => e
    #      puts '${LOGTIME} Error: Set General Failed,【' + e.message + '】';
    #   ensure
    #      File.open('$CONFIG_FILE','w') {|f| YAML.dump(Value, f)};
    #   end" 2>/dev/null >> $LOG_FILE

exit 0
#===================== 自定义防火墙设置 =====================#

#!/bin/sh
. /usr/share/openclash/log.sh
. /lib/functions.sh

# This script is called by /etc/init.d/openclash
# Add your custom firewall rules here, they will be added after the end of the OpenClash iptables rules

LOG_OUT "Tip: Start Add Custom Firewall Rules..."

exit 0
#===================== IPTABLES 防火墙设置 =====================#

#IPv4 NAT chain

# Generated by iptables-save v1.8.7 on Wed Aug 16 12:34:34 2023
*nat
:PREROUTING ACCEPT [140642:14019965]
:INPUT ACCEPT [101623:7656872]
:OUTPUT ACCEPT [188368:12055482]
:POSTROUTING ACCEPT [110243:7297880]
COMMIT
# Completed on Wed Aug 16 12:34:34 2023

#IPv4 Mangle chain

# Generated by iptables-save v1.8.7 on Wed Aug 16 12:34:34 2023
*mangle
:PREROUTING ACCEPT [19906791:32553223998]
:INPUT ACCEPT [9127012:18372171216]
:FORWARD ACCEPT [11026819:14196677094]
:OUTPUT ACCEPT [6782026:17482341600]
:POSTROUTING ACCEPT [17806866:31676031403]
COMMIT
# Completed on Wed Aug 16 12:34:34 2023

#IPv4 Filter chain

# Generated by iptables-save v1.8.7 on Wed Aug 16 12:34:34 2023
*filter
:INPUT ACCEPT [9066458:18367970751]
:FORWARD ACCEPT [11024352:14193620560]
:OUTPUT ACCEPT [6782016:17482340080]
COMMIT
# Completed on Wed Aug 16 12:34:34 2023

#IPv6 NAT chain

# Generated by ip6tables-save v1.8.7 on Wed Aug 16 12:34:34 2023
*nat
:PREROUTING ACCEPT [6378:832885]
:INPUT ACCEPT [10110:1143581]
:OUTPUT ACCEPT [42737:3702407]
:POSTROUTING ACCEPT [42749:3703415]
COMMIT
# Completed on Wed Aug 16 12:34:34 2023

#IPv6 Mangle chain

# Generated by ip6tables-save v1.8.7 on Wed Aug 16 12:34:34 2023
*mangle
:PREROUTING ACCEPT [3197800:3791643985]
:INPUT ACCEPT [3194531:3791387273]
:FORWARD ACCEPT [60:5040]
:OUTPUT ACCEPT [2510165:2535059199]
:POSTROUTING ACCEPT [2510543:2535143237]
COMMIT
# Completed on Wed Aug 16 12:34:34 2023

#IPv6 Filter chain

# Generated by ip6tables-save v1.8.7 on Wed Aug 16 12:34:34 2023
*filter
:INPUT ACCEPT [3194348:3791362433]
:FORWARD ACCEPT [60:5040]
:OUTPUT ACCEPT [2510165:2535059199]
COMMIT
# Completed on Wed Aug 16 12:34:34 2023

#===================== NFTABLES 防火墙设置 =====================#

table inet fw4 {
    chain input {
        type filter hook input priority filter; policy accept;
        udp dport 443 ip6 daddr != @china_ip6_route counter packets 0 bytes 0 reject with icmpv6 port-unreachable comment "OpenClash QUIC REJECT"
        iifname "lo" accept comment "!fw4: Accept traffic from loopback"
        ct state established,related accept comment "!fw4: Allow inbound established and related flows"
        tcp flags syn / fin,syn,rst,ack jump syn_flood comment "!fw4: Rate limit TCP syn packets"
        iifname { "WG", "br-lan" } jump input_lan comment "!fw4: Handle lan IPv4/IPv6 input traffic"
        iifname "pppoe-wan" jump input_wan comment "!fw4: Handle wan IPv4/IPv6 input traffic"
        iifname "docker0" jump input_docker comment "!fw4: Handle docker IPv4/IPv6 input traffic"
    }
}
table inet fw4 {
    chain forward {
        type filter hook forward priority filter; policy accept;
        oifname "utun" udp dport 443 ip daddr != @china_ip_route counter packets 67 bytes 82476 reject with icmp port-unreachable comment "OpenClash QUIC REJECT"
        meta l4proto { tcp, udp } oifname "utun" counter packets 37165 bytes 5974250 accept comment "OpenClash TUN Forward"
        ct state established,related accept comment "!fw4: Allow forwarded established and related flows"
        iifname { "WG", "br-lan" } jump forward_lan comment "!fw4: Handle lan IPv4/IPv6 forward traffic"
        iifname "pppoe-wan" jump forward_wan comment "!fw4: Handle wan IPv4/IPv6 forward traffic"
        iifname "docker0" jump forward_docker comment "!fw4: Handle docker IPv4/IPv6 forward traffic"
        jump upnp_forward comment "Hook into miniupnpd forwarding chain"
    }
}
table inet fw4 {
    chain dstnat {
        type nat hook prerouting priority dstnat; policy accept;
        ip6 daddr { 2001:4860:4860::8844, 2001:4860:4860::8888 } tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash Google DNS Hijack"
        meta nfproto ipv4 tcp dport 53 counter packets 12 bytes 624 accept comment "OpenClash TCP DNS Hijack"
        udp dport 53 counter packets 1034 bytes 67523 redirect to :53 comment "OpenClash DNS Hijack"
        tcp dport 53 counter packets 30 bytes 2160 redirect to :53 comment "OpenClash DNS Hijack"
        jump upnp_prerouting comment "Hook into miniupnpd prerouting chain"
    }
}
table inet fw4 {
    chain srcnat {
        type nat hook postrouting priority srcnat; policy accept;
        oifname "pppoe-wan" jump srcnat_wan comment "!fw4: Handle wan IPv4/IPv6 srcnat traffic"
        jump upnp_postrouting comment "Hook into miniupnpd postrouting chain"
    }
}
table inet fw4 {
    chain mangle_prerouting {
        type filter hook prerouting priority mangle; policy accept;
        meta l4proto { tcp, udp } counter packets 343993 bytes 266759403 jump openclash_mangle
        meta nfproto ipv6 counter packets 37274 bytes 44402604 jump openclash_mangle_v6
    }
}
table inet fw4 {
    chain mangle_output {
        type route hook output priority mangle; policy accept;
        meta l4proto { tcp, udp } counter packets 118979 bytes 55194613 jump openclash_mangle_output
    }
}
table inet fw4 {
    chain openclash_mangle {
        meta nfproto ipv4 udp sport 8000 counter packets 0 bytes 0 return
        meta nfproto ipv4 tcp sport 8000 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 1376 counter packets 0 bytes 0 return
        meta nfproto ipv4 tcp sport 1376 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 24853 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 500 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 68 counter packets 0 bytes 0 return
        meta l4proto { tcp, udp } iifname "utun" counter packets 139294 bytes 97737494 return
        ip daddr @localnetwork counter packets 131527 bytes 119698709 return
        ip protocol udp counter packets 5091 bytes 651451 jump openclash_upnp
        meta l4proto { tcp, udp } th dport 0-65535 meta mark set 0x00000162 counter packets 74227 bytes 50398972
    }
}
table inet fw4 {
    chain openclash_mangle_output {
        meta nfproto ipv4 udp sport 8000 counter packets 0 bytes 0 return
        meta nfproto ipv4 tcp sport 8000 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 1376 counter packets 9645 bytes 673392 return
        meta nfproto ipv4 tcp sport 1376 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 24853 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 500 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 68 counter packets 0 bytes 0 return
        ip daddr @localnetwork counter packets 7262 bytes 4172987 return
        meta l4proto { tcp, udp } th dport 0-65535 ip daddr 198.18.0.0/16 meta mark set 0x00000162 counter packets 31142 bytes 22231442
        tcp dport 0-65535 meta skuid != 65534 meta mark set 0x00000162 counter packets 4676 bytes 9763525
    }
}
table inet fw4 {
    chain openclash_dns_hijack {
    }
}
table inet fw4 {
    chain openclash_mangle_v6 {
        meta nfproto ipv6 udp sport 8000 counter packets 0 bytes 0 return
        meta nfproto ipv6 tcp sport 8000 counter packets 0 bytes 0 return
        meta nfproto ipv6 udp sport 1376 counter packets 0 bytes 0 return
        meta nfproto ipv6 tcp sport 1376 counter packets 85 bytes 6752 return
        meta nfproto ipv6 udp sport 24853 counter packets 0 bytes 0 return
        meta nfproto ipv6 udp sport 500 counter packets 0 bytes 0 return
        ip6 saddr fc00::/6 udp sport 546 counter packets 0 bytes 0 return
        ip6 daddr @localnetwork6 counter packets 33100 bytes 34673001 return
        meta nfproto ipv6 udp dport 53 counter packets 0 bytes 0 return
        ip6 daddr @china_ip6_route ip6 daddr != @china_ip6_route_pass counter packets 12 bytes 1004 return
        meta nfproto ipv6 tcp dport 0-65535 meta mark set 0x00000162 tproxy ip6 to :7895 counter packets 4098 bytes 9739756 accept comment "OpenClash TCP Tproxy"
        meta nfproto ipv6 udp dport 0-65535 meta mark set 0x00000162 tproxy ip6 to :7895 counter packets 5 bytes 480 accept comment "OpenClash UDP Tproxy"
    }
}
table inet fw4 {
    chain openclash_mangle_output_v6 {
        meta nfproto ipv6 udp sport 8000 counter packets 0 bytes 0 return
        meta nfproto ipv6 tcp sport 8000 counter packets 0 bytes 0 return
        meta nfproto ipv6 udp sport 1376 counter packets 0 bytes 0 return
        meta nfproto ipv6 tcp sport 1376 counter packets 0 bytes 0 return
        meta nfproto ipv6 udp sport 24853 counter packets 0 bytes 0 return
        meta nfproto ipv6 udp sport 500 counter packets 0 bytes 0 return
        meta nfproto ipv6 udp sport 546 counter packets 0 bytes 0 return
        ip6 daddr @localnetwork6 counter packets 0 bytes 0 return
        meta skuid != 65534 ip6 daddr @china_ip6_route ip6 daddr != @china_ip6_route_pass counter packets 0 bytes 0 return
        meta nfproto ipv6 meta skuid != 65534 tcp dport 0-65535 meta mark set 0x00000162 tproxy ip6 to :7895 counter packets 0 bytes 0 accept comment "OpenClash TCP Tproxy"
    }
}

#===================== IPSET状态 =====================#

#===================== 路由表状态 =====================#

#IPv4

#route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         10.172.64.1     0.0.0.0         UG    0      0        0 pppoe-wan
10.172.64.1     0.0.0.0         255.255.255.255 UH    0      0        0 pppoe-wan
172.17.0.0      0.0.0.0         255.255.0.0     U     0      0        0 docker0
172.20.0.0      0.0.0.0         255.255.0.0     U     0      0        0 br-401bea4f0eb7
192.168.2.0     0.0.0.0         255.255.255.0   U     0      0        0 br-lan
192.168.3.0     0.0.0.0         255.255.255.0   U     0      0        0 WG
192.168.3.50    0.0.0.0         255.255.255.255 UH    0      0        0 WG
198.18.0.0      0.0.0.0         255.255.0.0     U     0      0        0 utun

#ip route list
default via 10.172.64.1 dev pppoe-wan proto static 
10.172.64.1 dev pppoe-wan proto kernel scope link src *WAN IP*.111 
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown 
172.20.0.0/16 dev br-401bea4f0eb7 proto kernel scope link src 172.20.0.1 
192.168.2.0/24 dev br-lan proto kernel scope link src 192.168.2.1 
192.168.3.0/24 dev WG proto kernel scope link src 192.168.3.1 
192.168.3.50 dev WG proto static scope link 
198.18.0.0/16 dev utun proto kernel scope link src 198.18.0.1 

#ip rule show
0:  from all lookup local
32765:  from all fwmark 0x162 lookup 354
32766:  from all lookup main
32767:  from all lookup default

#IPv6

#route -A inet6
Kernel IPv6 routing table
Destination                                 Next Hop                                Flags Metric Ref    Use Iface
::/0                                        ::                                      U     1024   7        0 lo      
::/0                                        fe80::4682:e5ff:fe8e:fd36               UG    512    6        0 pppoe-wan
::/0                                        fe80::4682:e5ff:fe8e:fd36               UG    512    8        0 pppoe-wan
xxxxxxxx                    ::                                      !n    2147483647 3        0 lo      
xxxxxxxx                    ::                                      U     1024   7        0 br-lan  
xxxxxxxx                    ::                                      !n    2147483647 1        0 lo      
xxxxxxxx                    fe80::4682:e5ff:fe8e:fd36               UG    512    7        0 pppoe-wan
fd00:ab:cd::/64                             ::                                      U     1024   7        0 br-lan  
fd00:ab:cd::/48                             ::                                      !n    2147483647 2        0 lo      
fe80::4682:e5ff:fe8e:fd36/128               ::                                      U     256    1        0 pppoe-wan
fe80::7877:b1b:4a3f:f5fd/128                ::                                      U     256    2        0 pppoe-wan
fe80::/64                                   ::                                      U     256    7        0 br-lan  
fe80::/64                                   ::                                      U     256    1        0 eth0    
fe80::/64                                   ::                                      U     256    1        0 br-401bea4f0eb7
fe80::/64                                   ::                                      U     256    1        0 vethb1f9c6c
fe80::/64                                   ::                                      U     256    1        0 veth2ae25ad
fe80::/64                                   ::                                      U     256    1        0 vetha1cd724
fe80::/64                                   ::                                      U     256    1        0 veth2b1c546
fe80::/64                                   ::                                      U     256    1        0 veth407a9cf
fe80::/64                                   ::                                      U     256    1        0 veth7186fc3
fe80::/64                                   ::                                      U     256    1        0 veth546d992
fe80::/64                                   ::                                      U     256    1        0 veth726bc89
fe80::/64                                   ::                                      U     256    1        0 veth0803652
fe80::/64                                   ::                                      U     256    1        0 vetha2283b1
fe80::/64                                   ::                                      U     256    1        0 veth0071988
fe80::/64                                   ::                                      U     256    1        0 docker0 
fe80::/64                                   ::                                      U     256    1        0 utun    
::/0                                        ::                                      !n    -1     2        0 lo      
::1/128                                     ::                                      Un    0      9        0 lo      
xxxxxxxx                   ::                                      Un    0      3        0 pppoe-wan
*WAN IP*:f5fd/128  ::                                      Un    0      5        0 pppoe-wan
xxxxxxxx                   ::                                      Un    0      3        0 br-lan  
xxxxxxxx                  ::                                      Un    0      9        0 br-lan  
fd00:ab:cd::/128                            ::                                      Un    0      3        0 br-lan  
fd00:ab:cd::1/128                           ::                                      Un    0      9        0 br-lan  
fe80::/128                                  ::                                      Un    0      5        0 br-lan  
fe80::/128                                  ::                                      Un    0      3        0 eth0    
fe80::/128                                  ::                                      Un    0      3        0 br-401bea4f0eb7
fe80::/128                                  ::                                      Un    0      3        0 vethb1f9c6c
fe80::/128                                  ::                                      Un    0      3        0 veth2ae25ad
fe80::/128                                  ::                                      Un    0      3        0 veth2b1c546
fe80::/128                                  ::                                      Un    0      3        0 vetha1cd724
fe80::/128                                  ::                                      Un    0      3        0 veth0071988
fe80::/128                                  ::                                      Un    0      3        0 veth7186fc3
fe80::/128                                  ::                                      Un    0      3        0 veth0803652
fe80::/128                                  ::                                      Un    0      3        0 veth546d992
fe80::/128                                  ::                                      Un    0      3        0 vetha2283b1
fe80::/128                                  ::                                      Un    0      3        0 veth407a9cf
fe80::/128                                  ::                                      Un    0      3        0 veth726bc89
fe80::/128                                  ::                                      Un    0      3        0 docker0 
fe80::/128                                  ::                                      Un    0      3        0 utun    
fe80::42:9ff:febf:68e/128                   ::                                      Un    0      2        0 docker0 
fe80::42:e0ff:fe4e:3f83/128                 ::                                      Un    0      3        0 br-401bea4f0eb7
fe80::9d:bfff:fe94:8ae9/128                 ::                                      Un    0      2        0 veth0071988
fe80::2c51:c2ff:fe3a:5c63/128               ::                                      Un    0      3        0 veth0803652
fe80::3842:17ff:feee:909/128                ::                                      Un    0      2        0 veth2b1c546
fe80::38fa:2eff:fe00:e776/128               ::                                      Un    0      7        0 br-lan  
fe80::40b8:aff:fe8a:6173/128                ::                                      Un    0      4        0 veth546d992
fe80::4438:d3ff:fe27:ac49/128               ::                                      Un    0      2        0 veth407a9cf
fe80::584c:ecff:fe7b:44b7/128               ::                                      Un    0      2        0 veth726bc89
fe80::7877:b1b:4a3f:f5fd/128                ::                                      Un    0      4        0 pppoe-wan
fe80::8cb8:26ff:feb0:5838/128               ::                                      Un    0      4        0 vetha1cd724
fe80::a55b:4834:eb45:321a/128               ::                                      Un    0      2        0 utun    
fe80::e000:fff:fece:75ae/128                ::                                      Un    0      2        0 vetha2283b1
fe80::e463:6eff:fe96:9f4b/128               ::                                      Un    0      6        0 eth0    
fe80::e467:5cff:fe5d:d905/128               ::                                      Un    0      2        0 veth7186fc3
fe80::e8a3:99ff:fefd:986b/128               ::                                      Un    0      2        0 vethb1f9c6c
fe80::fc55:43ff:fe2f:6af0/128               ::                                      Un    0      2        0 veth2ae25ad
ff00::/8                                    ::                                      U     256    9        0 br-lan  
ff00::/8                                    ::                                      U     256    3        0 eth0    
ff00::/8                                    ::                                      U     256    6        0 pppoe-wan
ff00::/8                                    ::                                      U     256    1        0 WG      
ff00::/8                                    ::                                      U     256    5        0 br-401bea4f0eb7
ff00::/8                                    ::                                      U     256    5        0 vethb1f9c6c
ff00::/8                                    ::                                      U     256    5        0 veth2ae25ad
ff00::/8                                    ::                                      U     256    5        0 vetha1cd724
ff00::/8                                    ::                                      U     256    5        0 veth2b1c546
ff00::/8                                    ::                                      U     256    4        0 veth407a9cf
ff00::/8                                    ::                                      U     256    4        0 veth7186fc3
ff00::/8                                    ::                                      U     256    6        0 veth546d992
ff00::/8                                    ::                                      U     256    5        0 veth726bc89
ff00::/8                                    ::                                      U     256    6        0 veth0803652
ff00::/8                                    ::                                      U     256    5        0 vetha2283b1
ff00::/8                                    ::                                      U     256    5        0 veth0071988
ff00::/8                                    ::                                      U     256    3        0 docker0 
ff00::/8                                    ::                                      U     256    5        0 utun    
::/0                                        ::                                      !n    -1     2        0 lo      

#ip -6 route list
default from xxxxxxxx via fe80::4682:e5ff:fe8e:fd36 dev pppoe-wan proto static metric 512 pref medium
default from xxxxxxxx via fe80::4682:e5ff:fe8e:fd36 dev pppoe-wan proto static metric 512 pref medium
unreachable xxxxxxxx dev lo proto static metric 2147483647 pref medium
xxxxxxxx dev br-lan proto static metric 1024 pref medium
unreachable xxxxxxxx dev lo proto static metric 2147483647 pref medium
xxxxxxxx via fe80::4682:e5ff:fe8e:fd36 dev pppoe-wan proto static metric 512 pref medium
fd00:ab:cd::/64 dev br-lan proto static metric 1024 pref medium
unreachable fd00:ab:cd::/48 dev lo proto static metric 2147483647 pref medium
fe80::4682:e5ff:fe8e:fd36 dev pppoe-wan proto kernel metric 256 pref medium
fe80::7877:b1b:4a3f:f5fd dev pppoe-wan proto kernel metric 256 pref medium
fe80::/64 dev br-lan proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev br-401bea4f0eb7 proto kernel metric 256 pref medium
fe80::/64 dev vethb1f9c6c proto kernel metric 256 pref medium
fe80::/64 dev veth2ae25ad proto kernel metric 256 pref medium
fe80::/64 dev vetha1cd724 proto kernel metric 256 pref medium
fe80::/64 dev veth2b1c546 proto kernel metric 256 pref medium
fe80::/64 dev veth407a9cf proto kernel metric 256 pref medium
fe80::/64 dev veth7186fc3 proto kernel metric 256 pref medium
fe80::/64 dev veth546d992 proto kernel metric 256 pref medium
fe80::/64 dev veth726bc89 proto kernel metric 256 pref medium
fe80::/64 dev veth0803652 proto kernel metric 256 pref medium
fe80::/64 dev vetha2283b1 proto kernel metric 256 pref medium
fe80::/64 dev veth0071988 proto kernel metric 256 pref medium
fe80::/64 dev docker0 proto kernel metric 256 linkdown pref medium
fe80::/64 dev utun proto kernel metric 256 pref medium

#ip -6 rule show
0:  from all lookup local
32765:  from all fwmark 0x162 lookup 354
32766:  from all lookup main
4200000000: from xxxxxxxx iif br-lan unreachable

#===================== Tun设备状态 =====================#

utun: tun pi filter0x100

#===================== 端口占用状态 =====================#

tcp        0      0 198.18.0.1:7777         0.0.0.0:*               LISTEN      29090/clash
tcp        0      0 :::7890                 :::*                    LISTEN      29090/clash
tcp        0      0 :::7891                 :::*                    LISTEN      29090/clash
tcp        0      0 :::7892                 :::*                    LISTEN      29090/clash
tcp        0      0 :::7893                 :::*                    LISTEN      29090/clash
tcp        0      0 :::7895                 :::*                    LISTEN      29090/clash
tcp        0      0 :::9090                 :::*                    LISTEN      29090/clash
udp        0      0 :::38443                :::*                                29090/clash
udp        0      0 :::34389                :::*                                29090/clash
udp        0      0 :::7874                 :::*                                29090/clash
udp        0      0 :::7891                 :::*                                29090/clash
udp        0      0 :::7892                 :::*                                29090/clash
udp        0      0 :::7893                 :::*                                29090/clash
udp        0      0 :::7895                 :::*                                29090/clash
udp        0      0 :::42796                :::*                                29090/clash
udp        0      0 :::40810                :::*                                29090/clash
udp        0      0 :::32784                :::*                                29090/clash
udp        0      0 :::47355                :::*                                29090/clash
udp        0      0 :::59662                :::*                                29090/clash
udp        0      0 :::33385                :::*                                29090/clash
udp        0      0 :::43728                :::*                                29090/clash
udp        0      0 :::40036                :::*                                29090/clash
udp        0      0 :::42149                :::*                                29090/clash

#===================== 测试本机DNS查询(www.baidu.com) =====================#

Server:     127.0.0.1
Address:    127.0.0.1#53

Name:   www.baidu.com
Address: 198.18.0.12

#===================== 测试内核DNS查询(www.instagram.com) =====================#

Status: 0
TC: false
RD: true
RA: true
AD: false
CD: false

Question: 
  Name: www.instagram.com.
  Qtype: 1
  Qclass: 1

Answer: 
  TTL: 3600
  data: geo-p42.instagram.com.
  name: www.instagram.com.
  type: 5

  TTL: 3600
  data: z-p42-instagram.c10r.instagram.com.
  name: geo-p42.instagram.com.
  type: 5

  TTL: 60
  data: 31.13.77.174
  name: z-p42-instagram.c10r.instagram.com.
  type: 1

Dnsmasq 当前默认 resolv 文件：/tmp/resolv.conf.d/resolv.conf.auto

#===================== /tmp/resolv.conf.d/resolv.conf.auto =====================#

# Interface wan
nameserver 221.3.131.11
nameserver 221.3.131.12
# Interface wan_6
nameserver 2408:876c::8888

#===================== 测试本机网络连接(www.baidu.com) =====================#

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: private, no-cache, no-store, proxy-revalidate, no-transform
Connection: keep-alive
Content-Length: 277
Content-Type: text/html
Date: Wed, 16 Aug 2023 04:34:36 GMT
Etag: "575e1f65-115"
Last-Modified: Mon, 13 Jun 2016 02:50:13 GMT
Pragma: no-cache
Server: bfe/1.0.8.18

#===================== 测试本机网络下载(raw.githubusercontent.com) =====================#

HTTP/2 200 
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: text/plain; charset=utf-8
etag: "164887e509f49d611b745c94926c1e59df6802fc9db3bd2060f2c471fe51246c"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 1060:2627:64AAB:775F9:64DAAB8D
accept-ranges: bytes
date: Wed, 16 Aug 2023 04:34:37 GMT
via: 1.1 varnish
x-served-by: cache-qpg1229-QPG
x-cache: HIT
x-cache-hits: 2
x-timer: S1692160478.785699,VS0,VE0
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: d19807fde9a920b6f18e3fc5af0aabe1d9e54c22
expires: Wed, 16 Aug 2023 04:39:37 GMT
source-age: 158
content-length: 83

#===================== 最近运行日志(自动切换为Debug模式) =====================#

xxxxxxx

#===================== 最近运行日志获取完成(自动切换为silent模式) =====================#

#===================== 活动连接信息 =====================#
xxxxxxxx

### OpenClash Config

_No response_

### Expected Behavior

能够成功添加上面提到的防火墙规则

### Screenshots

_No response_

deuteros-gex commented 1 year ago

怎么没看懂你要干什么。。

手动加规则时会报错，是因为这么加完，相当于在output链里直接做tproxy。这是不行的，tproxy只能在prerouting链里做。output链里至多允许打个mark。

换句话说，openclash对应脚本写得原本就不对，导致了上述错误，所以才搞出openclash_mangle_output_v6这条废链。这条regular链没有被任何base链引用，所以不发挥任何作用。但它原本也只用来代理本机的ipv6 udp，讲真影响不大。

而且，这条废链应该和你的诉求没关系。如果只是想从外网访问路由器的端口，那openclash啥都不用动，只动openwrt自带的防火墙设置即可，也应该能成功，我一直是这么用的。

难道你是说，加完这几条防火墙规则才能用？那讲不通了。

kfstorm commented 1 year ago

@deuteros-gex 我对防火墙不是很了解。我现在遇到的情况是关闭OpenClash，我暴露的端口就可以访问，打开OpenClash后就不能访问，所以我怀疑是OpenClash的bug。我是发现openclash_mangle_output_v6这个废链里有我想要暴露的端口后，才想确定废链的问题是我自己的环境问题还是普遍问题，我并不清楚这个废链原本的作用。

但它原本也只用来代理本机的ipv6 udp，讲真影响不大。

我的防火墙规则里是这样配置的，没有限制协议类型，但是我测端口的时候用的是TCP流量。

firewall.@rule[11]=rule
firewall.@rule[11].name='Allow-Transmission'
firewall.@rule[11].src='wan'
firewall.@rule[11].target='ACCEPT'
firewall.@rule[11].dest_port='1376'

kfstorm commented 1 year ago

@deuteros-gex

但它原本也只用来代理本机的ipv6 udp，讲真影响不大。

可是这条废链里有TCP的规则。

而且OpenClash的IPv6设置里IPv6 Proxy Mode选择TProxy Mode的时候也没说只对UDP有用。

kfstorm commented 1 year ago

刚才又测试了一下，似乎是流量没打到路由器的服务上。在公网curl -6 <IPv6>:8000，内网监听8000端口python -m http.server 8000 --bind '::'。看来问题在入站流量上，不在出站流量上。

开启OpenClash时python程序没有任何访问日志：

python -m http.server 8000 --bind '::'
Serving HTTP on :: port 8000 (http://[::]:8000/) ...

关闭OpenClash时就有日志了：

python -m http.server 8000 --bind '::'
Serving HTTP on :: port 8000 (http://[::]:8000/) ...
2408:846c:5430:38f5:4988:43b6:d73a:xxxx - - [18/Aug/2023 13:08:59] "GET / HTTP/1.1" 200 -
2408:846c:5430:38f5:4988:43b6:d73a:xxxx- - [18/Aug/2023 13:09:37] "GET / HTTP/1.1" 200 -
2408:846c:5430:38f5:4988:43b6:d73a:xxxx - - [18/Aug/2023 13:09:41] "GET / HTTP/1.1" 200 -
2408:846c:5430:38f5:4988:43b6:d73a:xxxx - - [18/Aug/2023 13:09:50] "GET / HTTP/1.1" 200 -

trace了一下流量，恕我眼拙，看不出什么问题：

nft 'add chain inet fw4 trace_chain { type filter hook prerouting priority -301; }'
nft 'add rule inet fw4 trace_chain iifname "lo" tcp sport 8000 meta nftrace set 1'

nft monitor trace

输出为：

trace id 88567aba inet fw4 trace_chain packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 88567aba inet fw4 trace_chain rule iifname "pppoe-wan" tcp dport 8000 meta nftrace set 1 (verdict continue)
trace id 88567aba inet fw4 trace_chain verdict continue
trace id 88567aba inet fw4 trace_chain policy accept
trace id 88567aba inet fw4 raw_prerouting packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 88567aba inet fw4 raw_prerouting verdict continue
trace id 88567aba inet fw4 raw_prerouting policy accept
trace id 88567aba inet fw4 mangle_prerouting packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 88567aba inet fw4 mangle_prerouting rule meta l4proto { tcp, udp } counter packets 5447685 bytes 6837573691 jump openclash_mangle (verdict jump openclash_mangle)
trace id 88567aba inet fw4 openclash_mangle rule meta l4proto { tcp, udp } th dport 0-65535 meta mark set 0x00000162 counter packets 609204 bytes 299787601 (verdict continue)
trace id 88567aba inet fw4 openclash_mangle verdict continue meta mark 0x00000162
trace id 88567aba inet fw4 mangle_prerouting rule meta nfproto ipv6 counter packets 195697 bytes 273591796 jump openclash_mangle_v6 (verdict jump openclash_mangle_v6)
trace id 88567aba inet fw4 openclash_mangle_v6 verdict return meta mark 0x00000162
trace id 88567aba inet fw4 mangle_prerouting verdict continue meta mark 0x00000162
trace id 88567aba inet fw4 mangle_prerouting policy accept meta mark 0x00000162
trace id 88567aba inet fw4 dstnat packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 88567aba inet fw4 dstnat rule jump upnp_prerouting comment "Hook into miniupnpd prerouting chain" (verdict jump upnp_prerouting)
trace id 88567aba inet fw4 upnp_prerouting verdict continue meta mark 0x00000162
trace id 88567aba inet fw4 dstnat verdict continue meta mark 0x00000162
trace id 88567aba inet fw4 dstnat policy accept meta mark 0x00000162
trace id 88567aba inet fw4 prerouting packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 88567aba inet fw4 prerouting verdict continue meta mark 0x00000162
trace id 88567aba inet fw4 prerouting policy accept meta mark 0x00000162
trace id 88567aba inet fw4 mangle_input packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 88567aba inet fw4 mangle_input verdict continue meta mark 0x00000162
trace id 88567aba inet fw4 mangle_input policy accept meta mark 0x00000162
trace id 88567aba inet fw4 input packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 88567aba inet fw4 input rule tcp flags syn / fin,syn,rst,ack jump syn_flood comment "!fw4: Rate limit TCP syn packets" (verdict jump syn_flood)
trace id 88567aba inet fw4 syn_flood verdict return meta mark 0x00000162
trace id 88567aba inet fw4 input rule iifname "pppoe-wan" jump input_wan comment "!fw4: Handle wan IPv4/IPv6 input traffic" (verdict jump input_wan)
trace id 88567aba inet fw4 input_wan rule tcp dport 8000 counter packets 602 bytes 48164 accept comment "!fw4: tmp" (verdict accept)
trace id bdbf50c0 inet fw4 trace_chain packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id bdbf50c0 inet fw4 trace_chain rule iifname "pppoe-wan" tcp dport 8000 meta nftrace set 1 (verdict continue)
trace id bdbf50c0 inet fw4 trace_chain verdict continue
trace id bdbf50c0 inet fw4 trace_chain policy accept
trace id bdbf50c0 inet fw4 raw_prerouting packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id bdbf50c0 inet fw4 raw_prerouting verdict continue
trace id bdbf50c0 inet fw4 raw_prerouting policy accept
trace id bdbf50c0 inet fw4 mangle_prerouting packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id bdbf50c0 inet fw4 mangle_prerouting rule meta l4proto { tcp, udp } counter packets 5447685 bytes 6837573691 jump openclash_mangle (verdict jump openclash_mangle)
trace id bdbf50c0 inet fw4 openclash_mangle rule meta l4proto { tcp, udp } th dport 0-65535 meta mark set 0x00000162 counter packets 609204 bytes 299787601 (verdict continue)
trace id bdbf50c0 inet fw4 openclash_mangle verdict continue meta mark 0x00000162
trace id bdbf50c0 inet fw4 mangle_prerouting rule meta nfproto ipv6 counter packets 195697 bytes 273591796 jump openclash_mangle_v6 (verdict jump openclash_mangle_v6)
trace id bdbf50c0 inet fw4 openclash_mangle_v6 verdict return meta mark 0x00000162
trace id bdbf50c0 inet fw4 mangle_prerouting verdict continue meta mark 0x00000162
trace id bdbf50c0 inet fw4 mangle_prerouting policy accept meta mark 0x00000162
trace id bdbf50c0 inet fw4 dstnat packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id bdbf50c0 inet fw4 dstnat rule jump upnp_prerouting comment "Hook into miniupnpd prerouting chain" (verdict jump upnp_prerouting)
trace id bdbf50c0 inet fw4 upnp_prerouting verdict continue meta mark 0x00000162
trace id bdbf50c0 inet fw4 dstnat verdict continue meta mark 0x00000162
trace id bdbf50c0 inet fw4 dstnat policy accept meta mark 0x00000162
trace id bdbf50c0 inet fw4 prerouting packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id bdbf50c0 inet fw4 prerouting verdict continue meta mark 0x00000162
trace id bdbf50c0 inet fw4 prerouting policy accept meta mark 0x00000162
trace id bdbf50c0 inet fw4 mangle_input packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id bdbf50c0 inet fw4 mangle_input verdict continue meta mark 0x00000162
trace id bdbf50c0 inet fw4 mangle_input policy accept meta mark 0x00000162
trace id bdbf50c0 inet fw4 input packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id bdbf50c0 inet fw4 input rule tcp flags syn / fin,syn,rst,ack jump syn_flood comment "!fw4: Rate limit TCP syn packets" (verdict jump syn_flood)
trace id bdbf50c0 inet fw4 syn_flood verdict return meta mark 0x00000162
trace id bdbf50c0 inet fw4 input rule iifname "pppoe-wan" jump input_wan comment "!fw4: Handle wan IPv4/IPv6 input traffic" (verdict jump input_wan)
trace id bdbf50c0 inet fw4 input_wan rule tcp dport 8000 counter packets 602 bytes 48164 accept comment "!fw4: tmp" (verdict accept)
trace id 5810ac1d inet fw4 trace_chain packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 5810ac1d inet fw4 trace_chain rule iifname "pppoe-wan" tcp dport 8000 meta nftrace set 1 (verdict continue)
trace id 5810ac1d inet fw4 trace_chain verdict continue
trace id 5810ac1d inet fw4 trace_chain policy accept
trace id 5810ac1d inet fw4 raw_prerouting packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 5810ac1d inet fw4 raw_prerouting verdict continue
trace id 5810ac1d inet fw4 raw_prerouting policy accept
trace id 5810ac1d inet fw4 mangle_prerouting packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 5810ac1d inet fw4 mangle_prerouting rule meta l4proto { tcp, udp } counter packets 5447685 bytes 6837573691 jump openclash_mangle (verdict jump openclash_mangle)
trace id 5810ac1d inet fw4 openclash_mangle rule meta l4proto { tcp, udp } th dport 0-65535 meta mark set 0x00000162 counter packets 609204 bytes 299787601 (verdict continue)
trace id 5810ac1d inet fw4 openclash_mangle verdict continue meta mark 0x00000162
trace id 5810ac1d inet fw4 mangle_prerouting rule meta nfproto ipv6 counter packets 195697 bytes 273591796 jump openclash_mangle_v6 (verdict jump openclash_mangle_v6)
trace id 5810ac1d inet fw4 openclash_mangle_v6 verdict return meta mark 0x00000162
trace id 5810ac1d inet fw4 mangle_prerouting verdict continue meta mark 0x00000162
trace id 5810ac1d inet fw4 mangle_prerouting policy accept meta mark 0x00000162
trace id 5810ac1d inet fw4 dstnat packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 5810ac1d inet fw4 dstnat rule jump upnp_prerouting comment "Hook into miniupnpd prerouting chain" (verdict jump upnp_prerouting)
trace id 5810ac1d inet fw4 upnp_prerouting verdict continue meta mark 0x00000162
trace id 5810ac1d inet fw4 dstnat verdict continue meta mark 0x00000162
trace id 5810ac1d inet fw4 dstnat policy accept meta mark 0x00000162
trace id 5810ac1d inet fw4 prerouting packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 5810ac1d inet fw4 prerouting verdict continue meta mark 0x00000162
trace id 5810ac1d inet fw4 prerouting policy accept meta mark 0x00000162
trace id 5810ac1d inet fw4 mangle_input packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 5810ac1d inet fw4 mangle_input verdict continue meta mark 0x00000162
trace id 5810ac1d inet fw4 mangle_input policy accept meta mark 0x00000162
trace id 5810ac1d inet fw4 input packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 5810ac1d inet fw4 input rule tcp flags syn / fin,syn,rst,ack jump syn_flood comment "!fw4: Rate limit TCP syn packets" (verdict jump syn_flood)
trace id 5810ac1d inet fw4 syn_flood verdict return meta mark 0x00000162
trace id 5810ac1d inet fw4 input rule iifname "pppoe-wan" jump input_wan comment "!fw4: Handle wan IPv4/IPv6 input traffic" (verdict jump input_wan)
trace id 5810ac1d inet fw4 input_wan rule tcp dport 8000 counter packets 602 bytes 48164 accept comment "!fw4: tmp" (verdict accept)
trace id 45716dfb inet fw4 trace_chain packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 45716dfb inet fw4 trace_chain rule iifname "pppoe-wan" tcp dport 8000 meta nftrace set 1 (verdict continue)
trace id 45716dfb inet fw4 trace_chain verdict continue
trace id 45716dfb inet fw4 trace_chain policy accept
trace id 45716dfb inet fw4 raw_prerouting packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 45716dfb inet fw4 raw_prerouting verdict continue
trace id 45716dfb inet fw4 raw_prerouting policy accept
trace id 45716dfb inet fw4 mangle_prerouting packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 45716dfb inet fw4 mangle_prerouting rule meta l4proto { tcp, udp } counter packets 5447685 bytes 6837573691 jump openclash_mangle (verdict jump openclash_mangle)
trace id 45716dfb inet fw4 openclash_mangle rule meta l4proto { tcp, udp } th dport 0-65535 meta mark set 0x00000162 counter packets 609204 bytes 299787601 (verdict continue)
trace id 45716dfb inet fw4 openclash_mangle verdict continue meta mark 0x00000162
trace id 45716dfb inet fw4 mangle_prerouting rule meta nfproto ipv6 counter packets 195697 bytes 273591796 jump openclash_mangle_v6 (verdict jump openclash_mangle_v6)
trace id 45716dfb inet fw4 openclash_mangle_v6 verdict return meta mark 0x00000162
trace id 45716dfb inet fw4 mangle_prerouting verdict continue meta mark 0x00000162
trace id 45716dfb inet fw4 mangle_prerouting policy accept meta mark 0x00000162
trace id 45716dfb inet fw4 dstnat packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 45716dfb inet fw4 dstnat rule jump upnp_prerouting comment "Hook into miniupnpd prerouting chain" (verdict jump upnp_prerouting)
trace id 45716dfb inet fw4 upnp_prerouting verdict continue meta mark 0x00000162
trace id 45716dfb inet fw4 dstnat verdict continue meta mark 0x00000162
trace id 45716dfb inet fw4 dstnat policy accept meta mark 0x00000162
trace id 45716dfb inet fw4 prerouting packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 45716dfb inet fw4 prerouting verdict continue meta mark 0x00000162
trace id 45716dfb inet fw4 prerouting policy accept meta mark 0x00000162
trace id 45716dfb inet fw4 mangle_input packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 45716dfb inet fw4 mangle_input verdict continue meta mark 0x00000162
trace id 45716dfb inet fw4 mangle_input policy accept meta mark 0x00000162
trace id 45716dfb inet fw4 input packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 45716dfb inet fw4 input rule tcp flags syn / fin,syn,rst,ack jump syn_flood comment "!fw4: Rate limit TCP syn packets" (verdict jump syn_flood)
trace id 45716dfb inet fw4 syn_flood verdict return meta mark 0x00000162
trace id 45716dfb inet fw4 input rule iifname "pppoe-wan" jump input_wan comment "!fw4: Handle wan IPv4/IPv6 input traffic" (verdict jump input_wan)
trace id 45716dfb inet fw4 input_wan rule tcp dport 8000 counter packets 602 bytes 48164 accept comment "!fw4: tmp" (verdict accept)
trace id 4670e0db inet fw4 trace_chain packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 4670e0db inet fw4 trace_chain rule iifname "pppoe-wan" tcp dport 8000 meta nftrace set 1 (verdict continue)
trace id 4670e0db inet fw4 trace_chain verdict continue
trace id 4670e0db inet fw4 trace_chain policy accept
trace id 4670e0db inet fw4 raw_prerouting packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 4670e0db inet fw4 raw_prerouting verdict continue
trace id 4670e0db inet fw4 raw_prerouting policy accept
trace id 4670e0db inet fw4 mangle_prerouting packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 4670e0db inet fw4 mangle_prerouting rule meta l4proto { tcp, udp } counter packets 5447685 bytes 6837573691 jump openclash_mangle (verdict jump openclash_mangle)
trace id 4670e0db inet fw4 openclash_mangle rule meta l4proto { tcp, udp } th dport 0-65535 meta mark set 0x00000162 counter packets 609204 bytes 299787601 (verdict continue)
trace id 4670e0db inet fw4 openclash_mangle verdict continue meta mark 0x00000162
trace id 4670e0db inet fw4 mangle_prerouting rule meta nfproto ipv6 counter packets 195697 bytes 273591796 jump openclash_mangle_v6 (verdict jump openclash_mangle_v6)
trace id 4670e0db inet fw4 openclash_mangle_v6 verdict return meta mark 0x00000162
trace id 4670e0db inet fw4 mangle_prerouting verdict continue meta mark 0x00000162
trace id 4670e0db inet fw4 mangle_prerouting policy accept meta mark 0x00000162
trace id 4670e0db inet fw4 dstnat packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 4670e0db inet fw4 dstnat rule jump upnp_prerouting comment "Hook into miniupnpd prerouting chain" (verdict jump upnp_prerouting)
trace id 4670e0db inet fw4 upnp_prerouting verdict continue meta mark 0x00000162
trace id 4670e0db inet fw4 dstnat verdict continue meta mark 0x00000162
trace id 4670e0db inet fw4 dstnat policy accept meta mark 0x00000162
trace id 4670e0db inet fw4 prerouting packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 4670e0db inet fw4 prerouting verdict continue meta mark 0x00000162
trace id 4670e0db inet fw4 prerouting policy accept meta mark 0x00000162
trace id 4670e0db inet fw4 mangle_input packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 4670e0db inet fw4 mangle_input verdict continue meta mark 0x00000162
trace id 4670e0db inet fw4 mangle_input policy accept meta mark 0x00000162
trace id 4670e0db inet fw4 input packet: iif "pppoe-wan" ip6 saddr 2408:846c:5430:38f5:4988:43b6:d73a:xxxx ip6 daddr <IPv6> ip6 dscp cs0 ip6 ecn not-ect ip6 hoplimit 250 ip6 flowlabel 3840 ip6 nexthdr tcp ip6 length 44 tcp sport 51056 tcp dport 8000 tcp flags == syn tcp window 65535
trace id 4670e0db inet fw4 input rule tcp flags syn / fin,syn,rst,ack jump syn_flood comment "!fw4: Rate limit TCP syn packets" (verdict jump syn_flood)
trace id 4670e0db inet fw4 syn_flood verdict return meta mark 0x00000162
trace id 4670e0db inet fw4 input rule iifname "pppoe-wan" jump input_wan comment "!fw4: Handle wan IPv4/IPv6 input traffic" (verdict jump input_wan)
trace id 4670e0db inet fw4 input_wan rule tcp dport 8000 counter packets 602 bytes 48164 accept comment "!fw4: tmp" (verdict accept)

deuteros-gex commented 1 year ago

可以直接nft list table inet fw4输出完整防火墙信息（这个应该不涉及什么隐私的咯？），并指明关注的是那个端口，具体问题具体分析即可。

而且OpenClash的IPv6设置里IPv6 Proxy Mode选择TProxy Mode的时候也没说只对UDP有用。

openclash的luci里说了什么不用太过在意。。想较真的话，不妨关注一下openclash_mangle_out这条链，本机ipv6 tcp流量应该是被它命中的。

kfstorm commented 1 year ago

@deuteros-gex issue描述里有nft的配置。

我刚才对比了一下打开和关闭OpenClash的nft list ruleset的区别，找到了关键点。openclash_mangle里最后一条规则是meta l4proto { tcp, udp } th dport 0-65535 meta mark set 0x00000162 counter，我把这条规则删除，公网端口就通了。

我看openclash_mangle里前面都是针对IPv4的，而且还有一个openclash_mangle_v6的链专门处理IPv6，所以这里是不是搞错了呢？

完整的openclash_mangle链：

        chain openclash_mangle { # handle 147
                meta nfproto ipv4 udp sport 8000 counter packets 0 bytes 0 return # handle 204
                meta nfproto ipv4 tcp sport 8000 counter packets 0 bytes 0 return # handle 202
                meta nfproto ipv4 udp sport 1376 counter packets 0 bytes 0 return # handle 196
                meta nfproto ipv4 tcp sport 1376 counter packets 54 bytes 2952 return # handle 194
                meta nfproto ipv4 udp sport 24853 counter packets 0 bytes 0 return # handle 190
                meta nfproto ipv4 udp sport 500 counter packets 0 bytes 0 return # handle 186
                meta nfproto ipv4 udp sport 68 counter packets 3 bytes 1022 return # handle 182
                meta l4proto { tcp, udp } iifname "utun" counter packets 77563 bytes 47926853 return # handle 151
                ip daddr @localnetwork counter packets 115795 bytes 320639299 return # handle 152
                ip protocol udp counter packets 798 bytes 162208 jump openclash_upnp # handle 153
                meta l4proto { tcp, udp } th dport 0-65535 meta mark set 0x00000162 counter packets 23364 bytes 4602642 # handle 155
        }

kfstorm commented 1 year ago

有问题的规则是在这里添加的：

https://github.com/vernesong/OpenClash/blob/3952a3d4ea3728c1c929d0a92a4e0dcf2c7b7c2a/luci-app-openclash/root/etc/init.d/openclash#L1789

deuteros-gex commented 1 year ago

issue描述里有nft的配置。

不完整，起码漏掉了两条prerouting链没给，对着它分析容易盲人摸象，所以我根本没看。

不过既然问题找到了，要解释倒也容易。

大致是 ipv6包从wan来到路由，到了三层，先到mangle_prerouting链，命中第一条rule后跳到openclash_mangle链，因为是tcp，命中最后一条rule被打上mark，经过routing decision后转发到tun网卡。但是从你的配置文件能看出你用的是premium内核，由它控制的tun网卡不接受ipv6包，于是被丢弃。

至于为什么包是这么走。。那就需要自行学点nftables语法，理解每条规则的适用范围了。

========================= 上面提到的两条rule任意改掉一条，使其仅对ipv4适用，这样就能打断上述反常的跳转逻辑。

kfstorm commented 1 year ago

不好意思，前面的描述有误，有问题的是openclash_mangle_output（非openclash_mangle）链里的最后一条规则。

        chain openclash_mangle_output { # handle 140
                meta nfproto ipv4 udp sport 8000 counter packets 0 bytes 0 return # handle 203
                meta nfproto ipv4 tcp sport 8000 counter packets 0 bytes 0 return # handle 201
                meta nfproto ipv4 udp sport 1376 counter packets 13 bytes 1587 return # handle 195
                meta nfproto ipv4 tcp sport 1376 counter packets 0 bytes 0 return # handle 193
                meta nfproto ipv4 udp sport 24853 counter packets 0 bytes 0 return # handle 189
                meta nfproto ipv4 udp sport 500 counter packets 0 bytes 0 return # handle 185
                meta nfproto ipv4 udp sport 68 counter packets 0 bytes 0 return # handle 181
                ip daddr @localnetwork counter packets 369 bytes 190479 return # handle 141
                meta l4proto { tcp, udp } th dport 0-65535 ip daddr 198.18.0.0/16 meta mark set 0x00000162 counter packets 1233 bytes 1398271 # handle 143
                tcp dport 0-65535 meta skuid != 65534 meta mark set 0x00000162 counter packets 23 bytes 17722 # handle 144
        }

补上nft list table inet fw4的输出。

table inet fw4 {
    ct helper amanda {
        type "amanda" protocol udp
        l3proto inet
    }

    ct helper ftp {
        type "ftp" protocol tcp
        l3proto inet
    }

    ct helper RAS {
        type "RAS" protocol udp
        l3proto inet
    }

    ct helper Q.931 {
        type "Q.931" protocol tcp
        l3proto inet
    }

    ct helper irc {
        type "irc" protocol tcp
        l3proto ip
    }

    ct helper pptp {
        type "pptp" protocol tcp
        l3proto ip
    }

    ct helper sip {
        type "sip" protocol udp
        l3proto inet
    }

    ct helper snmp {
        type "snmp" protocol udp
        l3proto ip
    }

    ct helper tftp {
        type "tftp" protocol udp
        l3proto inet
    }

    set china_ip_route {
        type ipv4_addr
        flags interval
        auto-merge
        elements = { 1.0.1.0-1.0.3.255, 1.0.8.0/21,
                 1.0.32.0/19, 1.1.0.0/24,
                 1.1.2.0-1.1.63.255, 1.2.0.0-1.2.2.255,
                 1.2.4.0-1.2.127.255, 1.3.0.0/16,
                 1.4.1.0-1.4.127.255, 1.8.0.0/16,
                 1.10.0.0-1.10.9.255, 1.10.11.0-1.10.127.255,
                 1.12.0.0/14, 1.18.128.0/24,
                 1.24.0.0/13, 1.45.0.0/16,
                 1.48.0.0/14, 1.56.0.0/13,
                 1.68.0.0/14, 1.80.0.0/12,
                 1.116.0.0/14, 1.180.0.0-1.185.255.255,
                 1.188.0.0-1.199.255.255, 1.202.0.0-1.207.255.255,
                 3.5.214.0/23, 8.128.0.0/10,
                 8.208.64.0-8.209.63.255, 8.209.65.0-8.209.255.255,
                 8.211.0.0-8.211.155.255, 8.211.157.0-8.214.15.255,
                 8.214.17.0-8.214.61.255, 8.214.63.0-8.217.158.255,
                 8.217.160.0-8.218.218.255, 8.218.220.0-8.219.62.255,
                 8.219.64.0-8.223.255.255, 13.104.184.80/28,
                 13.107.184.8/30, 14.0.0.0/21,
                 14.0.12.0/22, 14.1.0.0/22,
                 14.1.24.0/22, 14.1.108.0/22,
                 14.16.0.0/12, 14.102.128.0/22,
                 14.102.156.0-14.102.158.255, 14.102.180.0/22,
                 14.103.0.0-14.127.255.255, 14.130.0.0/15,
                 14.134.0.0/15, 14.144.0.0/12,
                 14.192.60.0/22, 14.192.76.0/22,
                 14.196.0.0/15, 14.204.0.0/15,
                 14.208.0.0/12, 15.230.41.0/24,
                 15.230.49.0/24, 15.230.141.0/24,
                 17.85.192.0/20, 17.87.0.0-17.87.47.255,
                 17.87.50.0/24, 17.87.52.0/24,
                 17.87.54.0/24, 17.87.56.0/21,
                 17.87.72.0-17.87.87.255, 17.87.96.0-17.87.119.255,
                 17.87.136.0-17.87.140.255, 17.87.144.0/20,
                 17.87.240.0/23, 17.88.0.0/18,
                 17.88.80.0-17.88.103.255, 17.88.106.0-17.88.109.255,
                 17.88.112.0/21, 17.88.128.0-17.88.206.255,
                 17.91.192.0/21, 17.91.216.0/21,
                 17.93.8.0/21, 17.93.24.0/21,
                 17.93.48.0-17.93.79.255, 17.93.96.0/19,
                 17.93.136.0/21, 17.93.152.0/21,
                 17.93.184.0/21, 17.93.200.0-17.93.223.255,
                 17.93.232.0/21, 17.94.16.0-17.94.247.255,
                 17.127.128.0/23, 17.235.160.0/20,
                 20.134.160.0/20, 20.139.160.0/20,
                 20.249.255.0/24, 20.255.255.0/24,
                 27.0.128.0/21, 27.0.160.0/21,
                 27.0.188.0/22, 27.0.204.0-27.0.215.255,
                 27.8.0.0-27.31.255.255, 27.34.232.0/21,
                 27.36.0.0-27.47.255.255, 27.50.40.0/21,
                 27.50.128.0/17, 27.54.72.0/21,
                 27.54.152.0/21, 27.54.192.0/18,
                 27.98.208.0-27.98.255.255, 27.99.128.0/17,
                 27.103.0.0/16, 27.106.128.0/18,
                 27.106.204.0/22, 27.109.32.0/19,
                 27.109.124.0/22, 27.112.0.0/18,
                 27.112.80.0/20, 27.112.112.0/21,
                 27.113.128.0/18, 27.115.0.0/17,
                 27.116.44.0/22, 27.121.72.0/21,
                 27.121.120.0/21, 27.128.0.0/15,
                 27.131.220.0/22, 27.144.0.0/16,
                 27.148.0.0-27.159.255.255, 27.184.0.0-27.227.255.255,
                 36.0.0.0/22, 36.0.8.0-36.1.255.255,
                 36.4.0.0/14, 36.16.0.0-36.37.31.255,
                 36.37.36.0/23, 36.37.39.0-36.37.63.255,
                 36.40.0.0-36.49.255.255, 36.51.0.0-36.51.254.255,
                 36.56.0.0/13, 36.69.0.0/21,
                 36.69.16.0-36.69.64.255, 36.69.66.0-36.69.255.255,
                 36.96.0.0-36.223.255.255, 36.248.0.0/14,
                 36.254.0.0/16, 36.255.116.0/22,
                 36.255.128.0/22, 36.255.164.0/22,
                 36.255.172.0-36.255.179.255, 39.0.0.0/24,
                 39.0.2.0-39.0.255.255, 39.64.0.0-39.108.255.255,
                 39.109.120.0/23, 39.128.0.0/10,
                 40.0.176.0/20, 40.0.248.0/21,
                 40.72.0.0/15, 40.77.136.112/28,
                 40.77.236.224/27, 40.77.254.64/27,
                 40.125.128.0/17, 40.126.64.0/18,
                 40.198.10.0/24, 40.198.16.0-40.198.25.255,
                 40.251.225.0/24, 40.251.227.0/24,
                 42.0.0.0/22, 42.0.8.0-42.0.27.255,
                 42.0.32.0/19, 42.0.128.0-42.1.59.255,
                 42.1.128.0/17, 42.4.0.0/14,
                 42.48.0.0-42.59.255.255, 42.62.0.0-42.62.175.255,
                 42.62.180.0-42.62.191.255, 42.63.0.0/16,
                 42.80.0.0/15, 42.83.64.0-42.83.83.255,
                 42.83.88.0-42.95.255.255, 42.96.64.0-42.96.103.255,
                 42.96.108.0-42.97.255.255, 42.99.0.0-42.99.115.255,
                 42.99.120.0/21, 42.100.0.0/14,
                 42.120.0.0-42.123.31.255, 42.123.36.0-42.123.255.255,
                 42.128.0.0/12, 42.156.0.0/19,
                 42.156.36.0-42.187.123.255, 42.187.128.0/17,
                 42.192.0.0/13, 42.201.0.0/17,
                 42.202.0.0-42.240.255.255, 42.242.0.0-43.92.127.255,
                 43.93.0.0-43.95.255.255, 43.96.6.0-43.96.9.255,
                 43.96.12.0/22, 43.96.19.0/24,
                 43.96.22.0/23, 43.96.25.0/24,
                 43.96.29.0-43.127.255.255, 43.131.160.0/19,
                 43.135.224.0-43.151.255.255, 43.152.7.0/24,
                 43.152.16.0/24, 43.152.20.0/23,
                 43.152.30.0-43.152.32.255, 43.152.34.0/23,
                 43.152.38.0/23, 43.152.41.0/24,
                 43.152.46.0-43.152.49.255, 43.152.116.0-43.152.127.255,
                 43.152.131.0-43.152.133.255, 43.152.140.0/23,
                 43.152.150.0-43.152.153.255, 43.152.155.0/24,
                 43.152.163.0-43.152.167.255, 43.152.170.0-43.152.175.255,
                 43.152.178.0-43.152.181.255, 43.152.184.0/21,
                 43.159.64.0-43.159.66.255, 43.159.68.0-43.159.73.255,
                 43.159.75.0-43.159.76.255, 43.159.92.0/24,
                 43.159.94.0/23, 43.159.98.0/23,
                 43.159.101.0-43.159.103.255, 43.159.124.0/24,
                 43.159.160.0/19, 43.163.0.0-43.163.191.255,
                 43.164.0.0-43.172.14.255, 43.172.16.0-43.175.15.255,
                 43.175.20.0/23, 43.175.23.0-43.197.255.255,
                 43.224.12.0/22, 43.224.24.0/22,
                 43.224.44.0/22, 43.224.52.0-43.224.59.255,
                 43.224.68.0-43.224.75.255, 43.224.80.0/22,
                 43.224.100.0/22, 43.224.144.0/22,
                 43.224.160.0/22, 43.224.176.0/22,
                 43.224.184.0/22, 43.224.200.0-43.224.219.255,
                 43.224.240.0/24, 43.224.242.0/24,
                 43.225.76.0/22, 43.225.86.0/24,
                 43.225.120.0/22, 43.225.180.0/22,
                 43.225.208.0/22, 43.225.216.0-43.225.247.255,
                 43.225.252.0/22, 43.226.32.0-43.226.123.255,
                 43.226.128.0-43.226.167.255, 43.226.236.0-43.227.11.255,
                 43.227.32.0-43.227.95.255, 43.227.104.0/22,
                 43.227.136.0-43.227.147.255, 43.227.152.0-43.227.183.255,
                 43.227.188.0-43.227.223.255, 43.227.232.0/22,
                 43.227.248.0-43.228.71.255, 43.228.76.0/22,
                 43.228.100.0/22, 43.228.116.0/22,
                 43.228.132.0-43.228.139.255, 43.228.148.0-43.228.155.255,
                 43.228.188.0/22, 43.228.204.0/22,
                 43.228.240.0/22, 43.229.40.0/22,
                 43.229.48.0/22, 43.229.56.0/22,
                 43.229.96.0/22, 43.229.136.0/21,
                 43.229.168.0-43.229.199.255, 43.229.216.0/21,
                 43.229.232.0/21, 43.230.20.0/22,
                 43.230.32.0/22, 43.230.68.0-43.230.75.255,
                 43.230.124.0/22, 43.230.220.0-43.230.255.255,
                 43.231.12.0/22, 43.231.32.0/20,
                 43.231.80.0-43.231.111.255, 43.231.136.0-43.231.183.255,
                 43.236.0.0-43.239.51.255, 43.239.116.0-43.239.123.255,
                 43.239.172.0-43.239.179.255, 43.240.0.0/22,
                 43.240.56.0/21, 43.240.68.0-43.240.79.255,
                 43.240.84.0/22, 43.240.124.0-43.240.139.255,
                 43.240.156.0-43.240.223.255, 43.240.240.0-43.241.23.255,
                 43.241.48.0/22, 43.241.76.0-43.241.95.255,
                 43.241.112.0/22, 43.241.168.0-43.241.187.255,
                 43.241.208.0-43.241.255.255, 43.242.8.0-43.242.31.255,
                 43.242.48.0/22, 43.242.53.0-43.242.67.255,
                 43.242.72.0-43.242.99.255, 43.242.144.0-43.242.167.255,
                 43.242.180.0/22, 43.242.188.0-43.242.199.255,
                 43.242.204.0/22, 43.242.216.0/21,
                 43.242.252.0/22, 43.243.4.0-43.243.19.255,
                 43.243.88.0/22, 43.243.128.0/22,
                 43.243.136.0/22, 43.243.144.0/21,
                 43.243.156.0/22, 43.243.180.0/22,
                 43.243.228.0-43.243.235.255, 43.243.244.0/22,
                 43.246.0.0-43.246.99.255, 43.246.112.0/24,
                 43.246.228.0/22, 43.247.4.0-43.247.11.255,
                 43.247.44.0-43.247.51.255, 43.247.68.0/22,
                 43.247.76.0/22, 43.247.84.0-43.247.103.255,
                 43.247.108.0-43.247.115.255, 43.247.148.0-43.247.155.255,
                 43.247.176.0/20, 43.247.196.0-43.248.7.255,
                 43.248.20.0/22, 43.248.28.0/22,
                 43.248.48.0/22, 43.248.76.0-43.248.151.255,
                 43.248.176.0-43.248.211.255, 43.248.228.0-43.248.235.255,
                 43.248.244.0/22, 43.249.4.0/22,
                 43.249.120.0/22, 43.249.132.0-43.249.139.255,
                 43.249.144.0-43.249.171.255, 43.249.192.0/22,
                 43.249.236.0/22, 43.250.4.0/22,
                 43.250.12.0-43.250.23.255, 43.250.28.0-43.250.35.255,
                 43.250.96.0-43.250.104.255, 43.250.108.0-43.250.119.255,
                 43.250.128.0/22, 43.250.144.0/21,
                 43.250.160.0/22, 43.250.168.0/22,
                 43.250.176.0/22, 43.250.200.0/22,
                 43.250.212.0-43.250.223.255, 43.250.236.0/22,
                 43.250.244.0/22, 43.251.4.0/22,
                 43.251.12.0/22, 43.251.36.0/22,
                 43.251.100.0/23, 43.251.103.0/24,
                 43.251.192.0/22, 43.251.232.0/22,
                 43.251.244.0/22, 43.252.48.0/22,
                 43.252.56.0/22, 43.252.224.0/22,
                 43.254.0.0-43.254.11.255, 43.254.24.0/22,
                 43.254.36.0/22, 43.254.44.0/22,
                 43.254.52.0/22, 43.254.64.0/22,
                 43.254.72.0/22, 43.254.84.0-43.254.95.255,
                 43.254.100.0-43.254.107.255, 43.254.112.0/21,
                 43.254.128.0/22, 43.254.136.0-43.254.159.255,
                 43.254.168.0/21, 43.254.180.0-43.254.195.255,
                 43.254.200.0/22, 43.254.208.0/22,
                 43.254.220.0-43.254.243.255, 43.254.248.0-43.255.11.255,
                 43.255.16.0/22, 43.255.48.0/22,
                 43.255.64.0/20, 43.255.84.0/22,
                 43.255.96.0/22, 43.255.144.0/22,
                 43.255.176.0/22, 43.255.184.0/22,
                 43.255.192.0/22, 43.255.200.0-43.255.215.255,
                 43.255.224.0-43.255.235.255, 43.255.244.0/22,
                 45.40.192.0/18, 45.65.16.0/20,
                 45.112.132.0/22, 45.112.188.0/22,
                 45.112.208.0/20, 45.112.228.0-45.112.239.255,
                 45.113.12.0-45.113.31.255, 45.113.40.0/22,
                 45.113.52.0/22, 45.113.72.0/22,
                 45.113.144.0/21, 45.113.168.0/22,
                 45.113.184.0/22, 45.113.200.0-45.113.223.255,
                 45.113.228.0/22, 45.113.240.0/22,
                 45.113.252.0-45.114.3.255, 45.114.32.0/22,
                 45.114.40.0/22, 45.114.52.0/22,
                 45.114.96.0/22, 45.114.136.0/22,
                 45.114.196.0-45.114.203.255, 45.114.228.0/22,
                 45.114.236.0/22, 45.114.252.0/22,
                 45.115.44.0/22, 45.115.100.0/22,
                 45.115.120.0/22, 45.115.132.0/22,
                 45.115.144.0/22, 45.115.156.0/22,
                 45.115.164.0/22, 45.115.200.0/22,
                 45.115.212.0-45.115.219.255, 45.115.228.0/22,
                 45.115.244.0-45.115.251.255, 45.116.16.0-45.116.27.255,
                 45.116.32.0/21, 45.116.52.0/22,
                 45.116.96.0/21, 45.116.140.0/22,
                 45.116.152.0/22, 45.116.208.0/22,
                 45.117.8.0/22, 45.117.20.0/22,
                 45.117.68.0/22, 45.117.124.0/22,
                 45.117.252.0/22, 45.119.60.0-45.119.75.255,
                 45.119.104.0/22, 45.119.116.0/22,
                 45.119.232.0/22, 45.120.100.0/22,
                 45.120.140.0/22, 45.120.164.0/22,
                 45.120.180.128/27, 45.120.183.0/24,
                 45.120.240.0/22, 45.121.52.0/22,
                 45.121.64.0-45.121.75.255, 45.121.92.0-45.121.99.255,
                 45.121.172.0-45.121.179.255, 45.121.212.0/22,
                 45.121.240.0-45.122.43.255, 45.122.60.0-45.122.119.255,
                 45.122.160.0-45.122.219.255, 45.123.28.0-45.123.39.255,
                 45.123.44.0-45.123.87.255, 45.123.120.0/22,
                 45.123.128.0-45.123.139.255, 45.123.148.0-45.123.159.255,
                 45.123.164.0-45.123.187.255, 45.123.204.0/22,
                 45.123.212.0/22, 45.123.224.0-45.124.3.255,
                 45.124.20.0/22, 45.124.28.0-45.124.39.255,
                 45.124.44.0/22, 45.124.68.0/22,
                 45.124.76.0-45.124.83.255, 45.124.100.0/22,
                 45.124.124.0/22, 45.124.172.0-45.124.179.255,
                 45.124.208.0/22, 45.124.248.0/22,
                 45.125.24.0/22, 45.125.44.0/22,
                 45.125.52.0-45.125.59.255, 45.125.76.0-45.125.103.255,
                 45.125.136.0/22, 45.126.48.0/21,
                 45.126.108.0-45.126.123.255, 45.126.220.0/22,
                 45.127.8.0/21, 45.127.128.0/22,
                 45.127.144.0/21, 45.127.156.0/22,
                 45.248.8.0/22, 45.248.80.0/22,
                 45.248.88.0/22, 45.248.96.0/20,
                 45.248.128.0/21, 45.248.204.0-45.249.7.255,
                 45.249.12.0-45.249.39.255, 45.249.89.0/24,
                 45.249.112.0/22, 45.249.188.0-45.249.215.255,
                 45.250.12.0-45.250.19.255, 45.250.28.0-45.250.43.255,
                 45.250.76.0-45.250.99.255, 45.250.104.0-45.250.155.255,
                 45.250.164.0/22, 45.250.180.0-45.250.195.255,
                 45.251.0.0/22, 45.251.8.0/22,
                 45.251.16.0/21, 45.251.52.0/22,
                 45.251.84.0-45.251.103.255, 45.251.120.0/21,
                 45.251.140.0-45.251.227.255, 45.252.0.0-45.252.51.255,
                 45.252.84.0-45.252.179.255, 45.252.192.0-45.252.235.255,
                 45.253.0.0-45.253.87.255, 45.253.92.0-45.253.123.255,
                 45.253.130.0-45.254.23.255, 45.254.28.0/22,
                 45.254.40.0/22, 45.254.48.0-45.254.231.255,
                 45.254.236.0-45.254.243.255, 45.254.248.0/22,
                 45.255.0.0-45.255.123.255, 45.255.136.0-45.255.251.255,
                 46.248.24.0/23, 47.92.0.0-47.127.255.255,
                 49.4.0.0/14, 49.51.56.0-49.51.61.255,
                 49.51.110.0-49.51.127.255, 49.52.0.0/14,
                 49.64.0.0/11, 49.112.0.0-49.123.255.255,
                 49.128.0.0/24, 49.128.2.0-49.128.7.255,
                 49.140.0.0/15, 49.152.0.0/14,
                 49.208.0.0/14, 49.220.0.0/14,
                 49.232.0.0/14, 49.239.0.0/18,
                 49.239.192.0/18, 52.80.0.0/14,
                 52.93.242.120-52.93.242.255, 52.94.249.0/27,
                 52.130.0.0/15, 54.222.0.0/15,
                 54.231.208.0/20, 54.240.224.0/24,
                 57.92.96.0/20, 57.176.0.0/15,
                 58.14.0.0-58.25.255.255, 58.30.0.0-58.63.255.255,
                 58.65.232.0/21, 58.66.0.0/15,
                 58.68.128.0/17, 58.82.0.0/17,
                 58.83.0.0/16, 58.87.64.0/18,
                 58.99.128.0-58.101.255.255, 58.116.0.0/14,
                 58.128.0.0/13, 58.144.0.0/16,
                 58.154.0.0/15, 58.192.0.0/11,
                 58.240.0.0/12, 59.32.0.0-59.83.63.255,
                 59.83.130.0-59.83.255.255, 59.107.0.0-59.111.255.255,
                 59.151.0.0/17, 59.152.16.0/20,
                 59.152.34.0-59.152.39.255, 59.152.64.0/20,
                 59.152.112.0/21, 59.153.4.0/22,
                 59.153.32.0/22, 59.153.64.0-59.153.75.255,
                 59.153.92.0/22, 59.153.137.0-59.153.139.255,
                 59.153.152.0/22, 59.153.164.0-59.153.195.255,
                 59.155.0.0/16, 59.172.0.0/14,
                 59.191.0.0/17, 59.191.240.0-60.31.255.255,
                 60.55.0.0/16, 60.63.0.0/16,
                 60.160.0.0/11, 60.194.0.0/15,
                 60.200.0.0-60.223.255.255, 60.232.0.0/15,
                 60.235.0.0/16, 60.245.128.0/17,
                 60.247.0.0/16, 60.252.0.0/16,
                 60.253.128.0/17, 60.255.0.0/16,
                 61.4.81.0-61.4.95.255, 61.4.176.0/20,
                 61.8.160.0/20, 61.14.212.0-61.14.223.255,
                 61.14.240.0/21, 61.28.0.0/17,
                 61.29.128.0-61.29.243.255, 61.29.245.0-61.29.247.255,
                 61.29.249.0-61.29.254.255, 61.45.128.0/18,
                 61.45.224.0/20, 61.47.128.0/18,
                 61.48.0.0/13, 61.87.192.0/18,
                 61.128.0.0/10, 61.232.0.0-61.237.255.255,
                 61.240.0.0/14, 62.234.0.0/16,
                 64.71.138.0/25, 65.55.60.184/30,
                 66.119.149.0/24, 68.79.0.0/18,
                 69.194.166.0/24, 69.230.192.0/18,
                 69.231.128.0/18, 69.234.192.0/18,
                 69.235.128.0/18, 71.131.192.0-71.132.63.255,
                 71.136.64.0/18, 71.137.0.0/18,
                 72.163.240.0/23, 72.163.248.0/22,
                 75.75.236.0/29, 81.68.0.0/14,
                 82.156.0.0/15, 87.254.207.0/24,
                 91.234.36.0/24, 93.183.14.0/24,
                 93.183.18.0/24, 94.191.0.0/17,
                 101.0.0.0/22, 101.1.0.0/22,
                 101.2.172.0/22, 101.4.0.0/14,
                 101.16.0.0/12, 101.33.7.0/24,
                 101.33.23.0/24, 101.33.25.0/24,
                 101.33.28.0/24, 101.33.31.0/24,
                 101.33.57.0-101.33.59.255, 101.33.65.0/24,
                 101.33.88.0/23, 101.33.92.0-101.33.98.255,
                 101.33.128.0-101.36.79.255, 101.36.83.0-101.36.95.255,
                 101.36.128.0-101.43.255.255, 101.44.16.0/20,
                 101.44.48.0/24, 101.44.50.0-101.44.63.255,
                 101.44.192.0/20, 101.44.228.0/22,
                 101.44.236.0-101.44.251.255, 101.44.253.0/24,
                 101.45.0.0/16, 101.46.32.0-101.46.127.255,
                 101.46.176.0-101.46.223.255, 101.46.232.0-101.49.255.255,
                 101.50.8.0/21, 101.50.56.0/22,
                 101.52.0.0/16, 101.53.100.0/22,
                 101.54.0.0/16, 101.55.224.0/21,
                 101.64.0.0-101.78.3.255, 101.78.32.0/19,
                 101.80.0.0-101.96.11.255, 101.96.16.0/20,
                 101.96.128.0/17, 101.99.96.0/19,
                 101.101.64.0/19, 101.101.100.0/24,
                 101.101.102.0-101.101.127.255, 101.102.64.0/19,
                 101.102.100.0-101.102.102.255, 101.102.104.0-101.102.127.255,
                 101.104.0.0/14, 101.110.64.0-101.110.111.255,
                 101.110.116.0-101.110.127.255, 101.120.0.0-101.126.255.255,
                 101.128.0.0/22, 101.128.8.0-101.128.63.255,
                 101.129.0.0-101.135.255.255, 101.144.0.0/12,
                 101.192.0.0-101.196.255.255, 101.198.0.0/22,
                 101.198.128.0/18, 101.198.193.0-101.199.31.255,
                 101.199.48.0-101.201.255.255, 101.203.128.0-101.203.167.255,
                 101.203.172.0-101.203.191.255, 101.204.0.0/14,
                 101.224.0.0-101.233.255.255, 101.234.64.0/21,
                 101.234.76.0-101.234.127.255, 101.236.0.0-101.249.255.255,
                 101.251.0.0/22, 101.251.8.0-101.254.255.255,
                 103.1.8.0/22, 103.1.20.0-103.1.27.255,
                 103.1.72.0/22, 103.1.88.0/22,
                 103.1.168.0/22, 103.2.108.0/22,
                 103.2.156.0/22, 103.2.164.0/22,
                 103.2.200.0-103.2.215.255, 103.3.84.0-103.3.143.255,
                 103.3.148.0-103.3.159.255, 103.4.56.0/22,
                 103.4.168.0/22, 103.4.184.0/22,
                 103.4.224.0/22, 103.5.36.0/22,
                 103.5.52.0-103.5.59.255, 103.5.152.0/22,
                 103.5.168.0/22, 103.5.192.0/22,
                 103.5.252.0/22, 103.6.76.0/22,
                 103.6.108.0/22, 103.6.120.0/22,
                 103.6.220.0/22, 103.6.228.0/22,
                 103.7.4.0/22, 103.7.140.0/22,
                 103.7.212.0-103.7.223.255, 103.8.0.0-103.8.11.255,
                 103.8.32.0/22, 103.8.52.0/22,
                 103.8.68.0/22, 103.8.108.0/22,
                 103.8.156.0/22, 103.8.200.0/21,
                 103.8.220.0/22, 103.9.8.0/22,
                 103.9.24.0/22, 103.9.108.0/22,
                 103.9.152.0/22, 103.9.248.0-103.10.3.255,
                 103.10.16.0/22, 103.10.84.0/22,
                 103.10.111.0/24, 103.10.140.0/22,
                 103.11.16.0/22, 103.11.168.0/22,
                 103.11.180.0/22, 103.12.32.0/22,
                 103.12.68.0/24, 103.12.70.0/23,
                 103.12.98.0/23, 103.12.136.0/22,
                 103.12.184.0/22, 103.12.232.0/22,
                 103.13.12.0/22, 103.13.124.0/22,
                 103.13.144.0/22, 103.13.196.0/22,
                 103.13.244.0/22, 103.14.84.0/22,
                 103.14.132.0-103.14.139.255, 103.14.156.0/22,
                 103.14.240.0/22, 103.15.4.0-103.15.11.255,
                 103.15.16.0/22, 103.15.96.0/22,
                 103.15.200.0/22, 103.16.52.0/22,
                 103.16.80.0-103.16.91.255, 103.16.108.0/22,
                 103.16.124.0/22, 103.17.40.0/22,
                 103.17.64.0/22, 103.17.120.0/22,
                 103.17.136.0/22, 103.17.160.0/22,
                 103.17.204.0/22, 103.17.228.0/22,
                 103.18.186.0/23, 103.18.192.0/22,
                 103.18.208.0/21, 103.18.224.0/22,
                 103.19.12.0/22, 103.19.40.0/21,
                 103.19.50.0/23, 103.19.64.0-103.19.75.255,
                 103.19.232.0/22, 103.20.12.0/22,
                 103.20.32.0-103.20.34.255, 103.20.68.0/22,
                 103.20.112.0/22, 103.20.128.0/22,
                 103.20.160.0/22, 103.20.248.0/22,
                 103.21.112.0/21, 103.21.136.0/21,
                 103.21.176.0/22, 103.21.208.0/22,
                 103.21.240.0/22, 103.22.0.0-103.22.95.255,
                 103.22.100.0-103.22.127.255, 103.22.188.0/22,
                 103.22.228.0/22, 103.22.252.0/22,
                 103.23.8.0/22, 103.23.56.0/22,
                 103.23.160.0/21, 103.23.176.0/22,
                 103.23.228.0/22, 103.24.24.0/22,
                 103.24.116.0/22, 103.24.128.0/22,
                 103.24.144.0/22, 103.24.176.0/22,
                 103.24.184.0/22, 103.24.220.0/22,
                 103.24.228.0/22, 103.24.252.0/22,
                 103.25.8.0/23, 103.25.20.0-103.25.43.255,
                 103.25.48.0/22, 103.25.64.0/21,
                 103.25.148.0/22, 103.25.156.0/22,
                 103.25.216.0/22, 103.26.0.0/22,
                 103.26.64.0/22, 103.26.76.0/22,
                 103.26.132.0/22, 103.26.156.0-103.26.163.255,
                 103.26.228.0/22, 103.26.240.0/22,
                 103.27.4.0/22, 103.27.12.0/22,
                 103.27.24.0/22, 103.27.56.0/22,
                 103.27.96.0/22, 103.27.208.0/22,
                 103.27.240.0/22, 103.28.4.0-103.28.11.255,
                 103.28.184.0/22, 103.28.204.0/22,
                 103.28.212.0/22, 103.29.16.0/22,
                 103.29.24.0/23, 103.29.29.0/24,
                 103.29.128.0-103.29.139.255, 103.29.236.0/23,
                 103.30.20.0/22, 103.30.96.0/22,
                 103.30.104.0/22, 103.30.148.0/22,
                 103.30.200.0/22, 103.30.216.0/22,
                 103.30.228.0-103.30.239.255, 103.31.0.0/22,
                 103.31.48.0/21, 103.31.60.0-103.31.75.255,
                 103.31.148.0/22, 103.31.160.0/22,
                 103.31.168.0/22, 103.31.200.0/22,
                 103.31.236.0/22, 103.31.242.0/23,
                 103.32.0.0-103.35.51.255, 103.35.104.0/22,
                 103.35.180.0/23, 103.35.220.0/22,
                 103.36.28.0/22, 103.36.36.0/22,
                 103.36.56.0-103.36.67.255, 103.36.72.0/22,
                 103.36.96.0/22, 103.36.132.0-103.36.139.255,
                 103.36.160.0-103.36.247.255, 103.37.12.0-103.37.19.255,
                 103.37.24.0/22, 103.37.44.0/22,
                 103.37.52.0-103.37.59.255, 103.37.72.0/22,
                 103.37.100.0-103.37.107.255, 103.37.136.0-103.37.167.255,
                 103.37.172.0-103.37.177.255, 103.37.188.0/22,
                 103.37.208.0/20, 103.37.252.0-103.38.3.255,
                 103.38.21.0-103.38.22.255, 103.38.32.0/22,
                 103.38.40.0/21, 103.38.52.0-103.38.59.255,
                 103.38.76.0/22, 103.38.84.0/22,
                 103.38.92.0-103.38.99.255, 103.38.112.0/21,
                 103.38.132.0/22, 103.38.140.0/22,
                 103.38.146.0/23, 103.38.150.0/24,
                 103.38.154.0/23, 103.38.180.0/22,
                 103.38.208.0/22, 103.38.220.0-103.38.235.255,
                 103.38.248.0-103.38.253.255, 103.39.64.0/22,
                 103.39.88.0/22, 103.39.100.0-103.39.107.255,
                 103.39.160.0/19, 103.39.200.0-103.39.235.255,
                 103.40.4.0/22, 103.40.12.0-103.40.47.255,
                 103.40.76.0/22, 103.40.88.0/22,
                 103.40.96.0/22, 103.40.104.0/22,
                 103.40.124.0-103.40.131.255, 103.40.156.0/22,
                 103.40.164.0/22, 103.40.176.0/22,
                 103.40.192.0/22, 103.40.212.0-103.40.223.255,
                 103.40.225.0/24, 103.40.228.0-103.41.3.255,
                 103.41.48.0/21, 103.41.60.0/22,
                 103.41.72.0/22, 103.41.112.0/21,
                 103.41.129.0/24, 103.41.131.0/24,
                 103.41.136.0/21, 103.41.148.0-103.41.155.255,
                 103.41.160.0/21, 103.41.176.0/23,
                 103.41.184.0/24, 103.41.220.0-103.41.235.255,
                 103.41.240.0/22, 103.41.252.0/22,
                 103.42.4.0-103.42.11.255, 103.42.24.0/22,
                 103.42.32.0/22, 103.42.44.0/22,
                 103.42.50.0/24, 103.42.52.0/22,
                 103.42.60.0-103.42.71.255, 103.42.76.0-103.42.83.255,
                 103.42.100.0/22, 103.42.136.0/23,
                 103.42.168.0/22, 103.42.191.0/24,
                 103.42.200.0/24, 103.42.202.0/23,
                 103.42.220.0/22, 103.42.228.0-103.42.235.255,
                 103.42.240.0/22, 103.43.26.0/23,
                 103.43.60.0/22, 103.43.84.0/22,
                 103.43.94.0-103.43.110.255, 103.43.115.0/24,
                 103.43.118.0/24, 103.43.124.0/22,
                 103.43.140.0/22, 103.43.184.0/22,
                 103.43.192.0/21, 103.43.208.0/22,
                 103.43.214.0/24, 103.43.220.0-103.43.227.255,
                 103.43.240.0/22, 103.44.8.0/22,
                 103.44.16.0/23, 103.44.58.0/23,
                 103.44.69.0/24, 103.44.71.0/24,
                 103.44.80.0/21, 103.44.102.0/23,
                 103.44.120.0-103.44.131.255, 103.44.144.0/22,
                 103.44.152.0/22, 103.44.168.0/22,
                 103.44.176.0-103.44.215.255, 103.44.224.0/22,
                 103.44.236.0-103.45.63.255, 103.45.72.0-103.45.227.255,
                 103.45.248.0/22, 103.46.0.0/22,
                 103.46.12.0-103.46.139.255, 103.46.152.0-103.46.183.255,
                 103.46.244.0-103.46.251.255, 103.47.4.0/22,
                 103.47.20.0/22, 103.47.36.0-103.47.43.255,
                 103.47.48.0/22, 103.47.80.0/22,
                 103.47.96.0/22, 103.47.116.0-103.47.123.255,
                 103.47.136.0/21, 103.47.212.0/22,
                 103.48.52.0/22, 103.48.92.0/22,
                 103.48.136.0/22, 103.48.148.0-103.48.155.255,
                 103.48.160.0/21, 103.48.202.0/23,
                 103.48.216.0-103.48.247.255, 103.49.12.0/22,
                 103.49.20.0/22, 103.49.72.0/21,
                 103.49.96.0/22, 103.49.108.0/22,
                 103.49.176.0/21, 103.50.36.0/22,
                 103.50.44.0-103.50.75.255, 103.50.92.0/22,
                 103.50.108.0-103.50.127.255, 103.50.132.0-103.50.143.255,
                 103.50.172.0-103.50.203.255, 103.50.220.0-103.50.251.255,
                 103.52.40.0/22, 103.52.72.0-103.52.87.255,
                 103.52.96.0-103.52.107.255, 103.52.160.0/21,
                 103.52.172.0-103.52.179.255, 103.52.184.0/22,
                 103.52.196.0/22, 103.53.64.0/21,
                 103.53.92.0/22, 103.53.124.0-103.53.147.255,
                 103.53.180.0/22, 103.53.204.0-103.53.215.255,
                 103.53.236.0/22, 103.53.248.0/22,
                 103.54.8.0/22, 103.54.48.0/22,
                 103.54.160.0/21, 103.54.212.0/22,
                 103.54.240.0/22, 103.55.80.0/22,
                 103.55.120.0/22, 103.55.152.0/22,
                 103.55.172.0/22, 103.55.204.0-103.55.211.255,
                 103.55.228.0/22, 103.55.236.0/22,
                 103.56.20.0/22, 103.56.32.0/22,
                 103.56.56.0/21, 103.56.72.0/21,
                 103.56.94.0/23, 103.56.100.0-103.56.107.255,
                 103.56.152.0/22, 103.56.184.0/22,
                 103.56.200.0/22, 103.57.12.0/22,
                 103.57.52.0-103.57.59.255, 103.57.76.0/22,
                 103.57.136.0/22, 103.57.196.0/22,
                 103.58.24.0/22, 103.59.32.0/22,
                 103.59.76.0/22, 103.59.89.0/24,
                 103.59.108.0-103.59.120.255, 103.59.123.0-103.59.131.255,
                 103.59.136.0/22, 103.59.148.0/22,
                 103.59.164.0-103.59.169.255, 103.60.32.0/22,
                 103.60.44.0/22, 103.60.164.0/22,
                 103.60.228.0/22, 103.60.236.0/22,
                 103.61.60.0/24, 103.61.104.0/22,
                 103.61.140.0/22, 103.61.152.0-103.61.163.255,
                 103.61.172.0-103.61.179.255, 103.61.188.0/24,
                 103.61.190.0/24, 103.62.24.0/22,
                 103.62.72.0-103.62.91.255, 103.62.96.0-103.62.135.255,
                 103.62.156.0-103.62.195.255, 103.62.204.0-103.62.227.255,
                 103.63.32.0-103.63.91.255, 103.63.140.0-103.63.147.255,
                 103.63.152.0/22, 103.63.160.0-103.63.187.255,
                 103.63.192.0-103.63.211.255, 103.63.240.0-103.64.7.255,
                 103.64.24.0-103.64.127.255, 103.64.140.0-103.64.147.255,
                 103.64.152.0-103.65.19.255, 103.65.44.0-103.65.95.255,
                 103.65.98.0-103.65.139.255, 103.65.144.0-103.65.175.255,
                 103.65.224.0/23, 103.66.32.0/22,
                 103.66.40.0/22, 103.66.108.0/22,
                 103.66.200.0/22, 103.66.240.0-103.67.11.255,
                 103.67.40.0-103.67.151.255, 103.67.172.0/24,
                 103.67.175.0/24, 103.67.192.0/22,
                 103.67.212.0/22, 103.68.88.0/22,
                 103.68.100.0/22, 103.68.128.0/22,
                 103.69.16.0/22, 103.70.8.0/22,
                 103.70.148.0/22, 103.70.236.0/22,
                 103.70.252.0-103.71.3.255, 103.71.68.0-103.71.75.255,
                 103.71.80.0-103.71.91.255, 103.71.120.0-103.71.131.255,
                 103.71.196.0-103.71.203.255, 103.71.232.0/22,
                 103.72.12.0-103.72.55.255, 103.72.112.0-103.72.135.255,
                 103.72.149.0-103.72.151.255, 103.72.172.0/22,
                 103.72.180.0/22, 103.72.224.0-103.73.31.255,
                 103.73.48.0/22, 103.73.116.0-103.73.123.255,
                 103.73.128.0/20, 103.73.168.0/22,
                 103.73.176.0/22, 103.73.204.0-103.73.211.255,
                 103.73.241.0/24, 103.73.248.0/22,
                 103.74.24.0-103.74.51.255, 103.74.56.0/21,
                 103.74.80.0/22, 103.74.124.0/22,
                 103.74.148.0-103.74.159.255, 103.74.204.0/22,
                 103.74.232.0/22, 103.75.87.0-103.75.95.255,
                 103.75.104.0-103.75.115.255, 103.75.120.0/22,
                 103.75.128.0/22, 103.75.144.0/22,
                 103.75.152.0/22, 103.76.60.0-103.76.75.255,
                 103.76.92.0/22, 103.76.216.0-103.76.227.255,
                 103.77.28.0/22, 103.77.52.0-103.77.59.255,
                 103.77.88.0/22, 103.77.132.0/22,
                 103.77.148.0/22, 103.77.220.0/22,
                 103.78.56.0-103.78.67.255, 103.78.124.0/22,
                 103.78.172.0-103.78.179.255, 103.78.196.0/22,
                 103.78.228.0/22, 103.79.24.0/21,
                 103.79.36.0-103.79.47.255, 103.79.56.0-103.79.71.255,
                 103.79.80.0/21, 103.79.136.0/22,
                 103.79.188.0-103.79.215.255, 103.79.228.0/23,
                 103.80.44.0/22, 103.80.72.0/22,
                 103.80.176.0-103.80.187.255, 103.80.192.0/22,
                 103.80.200.0/22, 103.80.232.0/22,
                 103.81.4.0/22, 103.81.44.0-103.81.51.255,
                 103.81.96.0/22, 103.81.120.0/22,
                 103.81.148.0/22, 103.81.164.0/22,
                 103.81.200.0/22, 103.81.232.0/22,
                 103.82.60.0/22, 103.82.68.0/22,
                 103.82.84.0/22, 103.82.104.0/22,
                 103.82.224.0/22, 103.82.236.0/22,
                 103.83.44.0/22, 103.83.52.0/22,
                 103.83.60.0/22, 103.83.72.0/22,
                 103.83.112.0/22, 103.83.132.0/22,
                 103.83.180.0/22, 103.84.0.0/22,
                 103.84.12.0/22, 103.84.20.0-103.84.31.255,
                 103.84.48.0/22, 103.84.56.0/22,
                 103.84.64.0/22, 103.84.72.0/22,
                 103.85.44.0-103.85.59.255, 103.85.84.0/22,
                 103.85.136.0/22, 103.85.144.0/22,
                 103.85.164.0-103.85.179.255, 103.86.28.0-103.86.35.255,
                 103.86.60.0/22, 103.86.80.0/22,
                 103.86.204.0-103.87.7.255, 103.87.20.0/22,
                 103.87.32.0/22, 103.87.96.0/22,
                 103.87.132.0/22, 103.87.180.0/22,
                 103.87.224.0/22, 103.88.4.0-103.88.23.255,
                 103.88.32.0/21, 103.88.60.0-103.88.67.255,
                 103.88.72.0/22, 103.88.96.0/22,
                 103.88.164.0/22, 103.88.212.0/22,
                 103.89.28.0/22, 103.89.96.0-103.89.115.255,
                 103.89.148.0/22, 103.89.172.0/22,
                 103.89.184.0-103.89.231.255, 103.90.52.0/22,
                 103.90.92.0/22, 103.90.100.0-103.90.135.255,
                 103.90.152.0/22, 103.90.168.0/22,
                 103.90.173.0/24, 103.90.176.0/22,
                 103.90.188.0-103.90.195.255, 103.91.36.0-103.91.43.255,
                 103.91.108.0-103.91.113.255, 103.91.138.0/23,
                 103.91.152.0/22, 103.91.176.0/22,
                 103.91.200.0/22, 103.91.208.0/21,
                 103.91.236.0/22, 103.92.48.0-103.92.83.255,
                 103.92.88.0/22, 103.92.108.0/22,
                 103.92.124.0/22, 103.92.132.0/22,
                 103.92.156.0/22, 103.92.164.0-103.92.195.255,
                 103.92.236.0-103.93.7.255, 103.93.28.0/22,
                 103.93.84.0/22, 103.93.152.0/22,
                 103.93.180.0/22, 103.93.204.0/22,
                 103.94.12.0/22, 103.94.20.0/22,
                 103.94.32.0/20, 103.94.72.0/22,
                 103.94.88.0/22, 103.94.116.0/22,
                 103.94.160.0/22, 103.94.200.0/22,
                 103.95.52.0/22, 103.95.68.0/22,
                 103.95.88.0/21, 103.95.136.0-103.95.147.255,
                 103.95.152.0/22, 103.95.216.0-103.95.227.255,
                 103.95.236.0-103.95.255.255, 103.96.8.0/22,
                 103.96.124.0/22, 103.96.136.0/22,
                 103.96.152.0-103.96.219.255, 103.97.40.0/22,
                 103.97.60.0/23, 103.97.112.0/21,
                 103.97.148.0/22, 103.97.188.0-103.97.195.255,
                 103.98.40.0-103.98.51.255, 103.98.56.0/22,
                 103.98.80.0/22, 103.98.88.0/22,
                 103.98.100.0/22, 103.98.124.0/24,
                 103.98.126.0/24, 103.98.136.0-103.98.147.255,
                 103.98.164.0-103.98.171.255, 103.98.180.0/22,
                 103.98.196.0/22, 103.98.216.0-103.98.235.255,
                 103.98.240.0-103.98.250.255, 103.98.252.0/22,
                 103.99.56.0/22, 103.99.104.0/22,
                 103.99.116.0-103.99.123.255, 103.99.132.0-103.99.147.255,
                 103.99.152.0/22, 103.99.220.0/22,
                 103.99.232.0/21, 103.100.0.0/22,
                 103.100.32.0/22, 103.100.40.0/22,
                 103.100.48.0/22, 103.100.56.0/22,
                 103.100.64.0/22, 103.100.88.0/22,
                 103.100.116.0/22, 103.100.144.0/22,
                 103.100.240.0/22, 103.100.248.0/21,
                 103.101.4.0-103.101.15.255, 103.101.60.0/22,
                 103.101.121.0-103.101.124.255, 103.101.126.0/23,
                 103.101.144.0/21, 103.101.180.0-103.101.187.255,
                 103.102.76.0-103.102.83.255, 103.102.168.0/21,
                 103.102.180.0-103.102.196.255, 103.102.200.0/22,
                 103.102.208.0/21, 103.103.12.0-103.103.19.255,
                 103.103.36.0/22, 103.103.51.0/24,
                 103.103.72.0/22, 103.103.188.0/22,
                 103.103.200.0/21, 103.103.224.0/22,
                 103.104.36.0-103.104.43.255, 103.104.64.0/22,
                 103.104.152.0/22, 103.104.252.0-103.105.7.255,
                 103.105.12.0-103.105.19.255, 103.105.60.0/22,
                 103.105.116.0/22, 103.105.180.0-103.105.187.255,
                 103.105.200.0/21, 103.105.220.0/22,
                 103.106.36.0-103.106.47.255, 103.106.60.0/22,
                 103.106.68.0/22, 103.106.96.0/22,
                 103.106.120.0/22, 103.106.128.0/21,
                 103.106.190.0/23, 103.106.196.0/22,
                 103.106.212.0/22, 103.106.252.0-103.107.3.255,
                 103.107.28.0-103.107.35.255, 103.107.44.0/22,
                 103.107.72.0/22, 103.107.164.0-103.107.171.255,
                 103.107.188.0-103.107.195.255, 103.107.208.0/20,
                 103.108.52.0/22, 103.108.160.0/22,
                 103.108.188.0/24, 103.108.196.0/22,
                 103.108.208.0/21, 103.108.224.0/22,
                 103.108.244.0/22, 103.108.251.0/24,
                 103.109.20.0/22, 103.109.48.0/22,
                 103.109.88.0/22, 103.109.248.0/22,
                 103.110.32.0/22, 103.110.92.0/22,
                 103.110.119.0/24, 103.110.132.0-103.110.139.255,
                 103.110.156.0/22, 103.110.188.0/22,
                 103.110.204.0/22, 103.111.64.0/22,
                 103.111.172.0/22, 103.111.252.0/22,
                 103.112.72.0/22, 103.112.88.0/21,
                 103.112.108.0-103.112.115.255, 103.112.140.0/22,
                 103.113.4.0/22, 103.113.144.0/22,
                 103.113.220.0/22, 103.113.232.0/21,
                 103.114.4.0/22, 103.114.68.0/22,
                 103.114.100.0/22, 103.114.148.0/22,
                 103.114.156.0/23, 103.114.176.0/22,
                 103.114.212.0/22, 103.114.236.0-103.114.243.255,
                 103.115.16.0/22, 103.115.52.0/22,
                 103.115.68.0/22, 103.115.92.0/22,
                 103.115.120.0/22, 103.115.148.0/22,
                 103.115.248.0/22, 103.116.64.0/23,
                 103.116.76.0/22, 103.116.92.0/22,
                 103.116.120.0/22, 103.116.128.0/22,
                 103.116.184.0/22, 103.116.220.0-103.116.231.255,
                 103.117.16.0/22, 103.117.88.0/22,
                 103.117.188.0/22, 103.117.220.0/22,
                 103.118.36.0/22, 103.118.52.0-103.118.75.255,
                 103.118.88.0/22, 103.118.173.0/24,
                 103.119.115.0/24, 103.119.156.0/22,
                 103.119.180.0/22, 103.119.200.0/22,
                 103.119.224.0/23, 103.119.227.0/24,
                 103.120.52.0/22, 103.120.72.0/22,
                 103.120.88.0/22, 103.120.96.0/22,
                 103.120.101.0-103.120.102.255, 103.120.140.0/22,
                 103.120.196.0/22, 103.120.224.0/22,
                 103.121.52.0/22, 103.121.160.0/21,
                 103.121.252.0/22, 103.122.48.0/22,
                 103.122.192.0/22, 103.122.240.0-103.122.242.255,
                 103.123.4.0/22, 103.123.56.0/22,
                 103.123.88.0/21, 103.123.116.0/22,
                 103.123.176.0/22, 103.123.200.0-103.123.215.255,
                 103.124.24.0/22, 103.124.48.0/22,
                 103.124.64.0/22, 103.124.212.0-103.124.219.255,
                 103.125.20.0/22, 103.125.44.0/22,
                 103.125.132.0/22, 103.125.164.0/22,
                 103.125.196.0/22, 103.125.236.0/22,
                 103.126.0.0/22, 103.126.16.0/23,
                 103.126.44.0/22, 103.126.124.0-103.126.131.255,
                 103.129.148.0/22, 103.130.132.0/22,
                 103.130.160.0/22, 103.130.228.0/22,
                 103.131.20.0/22, 103.131.36.0/22,
                 103.131.152.0/22, 103.131.168.0/22,
                 103.131.224.0/21, 103.131.240.0/22,
                 103.132.60.0-103.132.83.255, 103.132.104.0-103.132.123.255,
                 103.132.188.0/22, 103.132.208.0/21,
                 103.133.12.0/22, 103.133.40.0/22,
                 103.133.128.0/22, 103.133.232.0/22,
                 103.134.196.0/22, 103.135.80.0/22,
                 103.135.124.0/22, 103.135.148.0/22,
                 103.135.156.0-103.135.167.255, 103.135.176.0/22,
                 103.135.184.0/22, 103.135.192.0/21,
                 103.135.236.0/22, 103.136.128.0/22,
                 103.136.232.0/22, 103.137.58.0-103.137.60.255,
                 103.137.76.0/22, 103.137.136.0/23,
                 103.137.149.0/24, 103.137.180.0/22,
                 103.137.236.0/22, 103.138.2.0/23,
                 103.138.135.0/24, 103.138.208.0/23,
                 103.138.220.0/23, 103.138.248.0/23,
                 103.139.22.0/23, 103.139.92.0/23,
                 103.139.134.0/23, 103.139.172.0/23,
                 103.139.204.0/23, 103.139.212.0/23,
                 103.140.14.0/23, 103.140.140.0/23,
                 103.140.144.0/23, 103.140.192.0/23,
                 103.141.10.0/23, 103.141.58.0/23,
                 103.141.128.0/23, 103.141.186.0/23,
                 103.141.242.0/23, 103.142.28.0/23,
                 103.142.58.0/23, 103.142.82.0/23,
                 103.142.96.0/23, 103.142.122.0/23,
                 103.142.128.0/23, 103.142.154.0-103.142.157.255,
                 103.142.180.0/23, 103.142.186.0/23,
                 103.142.234.0/23, 103.142.238.0/23,
                 103.143.16.0/22, 103.143.31.0/24,
                 103.143.74.0/23, 103.143.124.0/23,
                 103.143.132.0/22, 103.143.174.0/23,
                 103.143.228.0/23, 103.144.66.0/23,
                 103.144.70.0-103.144.73.255, 103.144.88.0/24,
                 103.144.136.0/23, 103.144.158.0/23,
                 103.145.42.0/23, 103.145.94.0/23,
                 103.145.98.0/23, 103.145.188.0/23,
                 103.146.72.0/23, 103.146.126.0/23,
                 103.146.138.0/23, 103.146.236.0/23,
                 103.146.252.0/23, 103.147.124.0/23,
                 103.147.206.0/23, 103.148.174.0/23,
                 103.149.6.0/23, 103.149.17.0/24,
                 103.149.44.0/23, 103.149.210.0/23,
                 103.149.214.0/23, 103.149.220.0/23,
                 103.149.242.0-103.149.247.255, 103.150.24.0/23,
                 103.150.66.0/23, 103.150.72.0/23,
                 103.150.122.0/23, 103.150.126.0-103.150.129.255,
                 103.150.146.0/23, 103.150.164.0/23,
                 103.150.199.0-103.150.201.255, 103.150.216.0/23,
                 103.150.244.0/23, 103.151.142.0/23,
                 103.151.148.0/23, 103.151.158.0/23,
                 103.152.28.0/22, 103.152.56.0/23,
                 103.152.76.0/23, 103.152.120.0/22,
                 103.152.152.0/23, 103.152.168.0/23,
                 103.152.186.0/23, 103.152.192.0/23,
                 103.152.200.0/23, 103.152.208.0/23,
                 103.152.224.0/23, 103.152.250.0/23,
                 103.153.99.0/24, 103.153.114.0/23,
                 103.153.122.0/23, 103.153.132.0/23,
                 103.153.146.0/23, 103.153.160.0/23,
                 103.154.18.0/23, 103.154.30.0-103.154.33.255,
                 103.154.40.0/23, 103.154.66.0/23,
                 103.154.162.0-103.154.165.255, 103.154.168.0/23,
                 103.155.14.0/23, 103.155.34.0/23,
                 103.155.48.0/23, 103.155.76.0/23,
                 103.155.248.0/23, 103.156.28.0/23,
                 103.156.68.0/23, 103.156.78.0/23,
                 103.156.104.0/23, 103.156.158.0/23,
                 103.156.174.0/23, 103.156.186.0/23,
                 103.156.228.0/23, 103.157.30.0/23,
                 103.157.174.0/23, 103.157.212.0/23,
                 103.157.234.0/23, 103.157.254.0-103.158.1.255,
                 103.158.8.0/23, 103.158.16.0/23,
                 103.158.200.0/23, 103.158.224.0/23,
                 103.159.122.0-103.159.125.255, 103.159.134.0/23,
                 103.159.142.0/23, 103.160.32.0/22,
                 103.160.112.0/22, 103.160.244.0/23,
                 103.160.254.0/23, 103.161.14.0/23,
                 103.161.102.0/23, 103.161.139.0/24,
                 103.161.208.0/23, 103.161.220.0/23,
                 103.161.254.0/23, 103.162.10.0/23,
                 103.162.32.0/23, 103.162.116.0/23,
                 103.163.28.0/23, 103.163.32.0/23,
                 103.163.46.0/23, 103.163.74.0/23,
                 103.163.180.0/23, 103.164.4.0/23,
                 103.164.32.0/23, 103.164.40.0/22,
                 103.164.64.0/23, 103.164.76.0/23,
                 103.164.178.0/23, 103.164.226.0/23,
                 103.165.44.0/23, 103.165.52.0/23,
                 103.165.82.0/23, 103.165.110.0/23,
                 103.166.50.0-103.166.55.255, 103.166.84.0/23,
                 103.166.138.0/23, 103.166.242.0/23,
                 103.167.0.0/23, 103.167.36.0/23,
                 103.168.98.0/23, 103.168.170.0/23,
                 103.169.50.0/23, 103.169.62.0/23,
                 103.169.108.0/23, 103.169.162.0/23,
                 103.169.202.0/23, 103.170.4.0/23,
                 103.170.134.0/23, 103.170.212.0/23,
                 103.171.32.0/23, 103.171.214.0/23,
                 103.172.32.0/23, 103.172.160.0/23,
                 103.173.102.0/23, 103.173.182.0-103.173.185.255,
                 103.174.94.0/23, 103.175.114.0/23,
                 103.175.118.0/23, 103.176.52.0/23,
                 103.176.222.0/23, 103.176.244.0/23,
                 103.177.28.0/23, 103.177.70.0/23,
                 103.177.162.0/24, 103.178.240.0/23,
                 103.179.76.0/22, 103.180.226.0/23,
                 103.181.234.0/23, 103.183.26.0/23,
                 103.183.66.0/23, 103.183.122.0-103.183.125.255,
                 103.184.46.0/23, 103.184.60.0/23,
                 103.185.78.0-103.185.81.255, 103.186.0.0-103.186.213.255,
                 103.186.216.0-103.189.93.255, 103.189.152.0/22,
                 103.190.20.0/23, 103.190.71.0/24,
                 103.190.104.0/23, 103.190.116.0/23,
                 103.190.119.0/24, 103.190.122.0/23,
                 103.191.102.0/23, 103.191.242.0/23,
                 103.192.0.0/19, 103.192.48.0-103.192.59.255,
                 103.192.84.0-103.192.115.255, 103.192.128.0/21,
                 103.192.137.0-103.192.147.255, 103.192.164.0/22,
                 103.192.188.0/22, 103.192.208.0-103.192.219.255,
                 103.192.252.0/22, 103.193.40.0/21,
                 103.193.120.0/22, 103.193.140.0/22,
                 103.193.160.0/22, 103.193.188.0-103.193.195.255,
                 103.193.212.0-103.193.239.255, 103.194.17.0-103.194.19.255,
                 103.194.230.0/23, 103.195.112.0/22,
                 103.195.152.0/22, 103.195.160.0/22,
                 103.196.64.0/22, 103.196.72.0/22,
                 103.196.88.0-103.196.99.255, 103.196.168.0/22,
                 103.196.185.0-103.196.187.255, 103.197.180.0/22,
                 103.197.228.0/22, 103.197.253.0-103.197.255.255,
                 103.198.20.0/22, 103.198.60.0-103.198.67.255,
                 103.198.72.0/22, 103.198.124.0/22,
                 103.198.156.0/22, 103.198.180.0/22,
                 103.198.196.0/22, 103.198.216.0-103.198.239.255,
                 103.198.244.0/22, 103.199.164.0/22,
                 103.199.196.0/22, 103.199.220.0/22,
                 103.199.228.0/22, 103.199.244.0-103.199.255.255,
                 103.200.52.0/22, 103.200.64.0/21,
                 103.200.136.0-103.200.195.255, 103.200.220.0-103.201.23.255,
                 103.201.28.0-103.201.67.255, 103.201.76.0-103.201.123.255,
                 103.201.152.0-103.202.47.255, 103.202.56.0-103.202.147.255,
                 103.202.152.0-103.202.207.255, 103.202.212.0/22,
                 103.202.228.0/22, 103.202.236.0-103.203.35.255,
                 103.203.96.0/22, 103.203.104.0-103.203.131.255,
                 103.203.140.0/22, 103.203.164.0-103.203.171.255,
                 103.203.192.0/22, 103.203.200.0/22,
                 103.203.212.0-103.203.219.255, 103.204.24.0/22,
                 103.204.72.0/22, 103.204.88.0/22,
                 103.204.112.0/22, 103.204.136.0-103.204.155.255,
                 103.204.196.0/22, 103.204.216.0/23,
                 103.204.232.0/21, 103.205.0.0/21,
                 103.205.10.0/24, 103.205.20.0/22,
                 103.205.40.0/21, 103.205.52.0/22,
                 103.205.108.0/22, 103.205.116.0/22,
                 103.205.136.0/22, 103.205.162.0/24,
                 103.205.188.0-103.205.203.255, 103.205.236.0/22,
                 103.205.248.0-103.206.3.255, 103.206.44.0/22,
                 103.206.148.0/22, 103.207.104.0/22,
                 103.207.184.0-103.207.223.255, 103.207.228.0-103.207.235.255,
                 103.208.12.0-103.208.19.255, 103.208.28.0/22,
                 103.208.48.0/22, 103.208.148.0/22,
                 103.209.112.0/22, 103.209.136.0/22,
                 103.209.201.0-103.209.203.255, 103.209.208.0/22,
                 103.209.216.0/22, 103.210.0.0/22,
                 103.210.96.0/22, 103.210.156.0/22,
                 103.210.164.0-103.210.191.255, 103.210.217.0-103.210.219.255,
                 103.211.44.0/22, 103.211.96.0/22,
                 103.211.102.0/23, 103.211.156.0/22,
                 103.211.165.0/24, 103.211.168.0/22,
                 103.211.220.0/22, 103.211.248.0/22,
                 103.212.0.0/20, 103.212.44.0-103.212.51.255,
                 103.212.84.0/22, 103.212.100.0/22,
                 103.212.148.0/22, 103.212.164.0/22,
                 103.212.196.0-103.212.203.255, 103.212.252.0/22,
                 103.213.40.0-103.213.99.255, 103.213.132.0-103.213.191.255,
                 103.213.252.0/22, 103.214.48.0/22,
                 103.214.84.0/22, 103.214.212.0/22,
                 103.214.240.0/21, 103.215.28.0-103.215.39.255,
                 103.215.44.0/22, 103.215.100.0/23,
                 103.215.104.0/21, 103.215.116.0-103.215.123.255,
                 103.215.140.0/22, 103.216.4.0-103.216.47.255,
                 103.216.64.0/22, 103.216.108.0/22,
                 103.216.136.0/22, 103.216.152.0/22,
                 103.216.224.0/21, 103.216.240.0-103.217.63.255,
                 103.217.168.0/22, 103.217.180.0-103.217.207.255,
                 103.218.8.0-103.218.23.255, 103.218.28.0-103.218.95.255,
                 103.218.192.0-103.218.219.255, 103.219.22.0-103.219.39.255,
                 103.219.64.0/22, 103.219.84.0-103.219.103.255,
                 103.219.176.0/22, 103.219.184.0/22,
                 103.220.48.0-103.220.67.255, 103.220.93.0-103.220.99.255,
                 103.220.104.0/21, 103.220.116.0-103.220.155.255,
                 103.220.160.0-103.220.203.255, 103.220.240.0-103.221.47.255,
                 103.221.49.0-103.221.51.255, 103.221.88.0-103.221.93.255,
                 103.221.96.0-103.221.207.255, 103.222.0.0-103.222.19.255,
                 103.222.24.0/21, 103.222.33.0-103.222.235.255,
                 103.222.240.0/21, 103.223.16.0-103.223.119.255,
                 103.223.124.0-103.223.135.255, 103.223.140.0-103.223.183.255,
                 103.223.188.0-103.224.3.255, 103.224.40.0/21,
                 103.224.60.0/22, 103.224.220.0-103.224.235.255,
                 103.226.40.0/22, 103.226.56.0/21,
                 103.226.80.0/22, 103.226.116.0/22,
                 103.226.132.0/22, 103.226.156.0/22,
                 103.226.180.0/22, 103.226.196.0/22,
                 103.227.48.0/22, 103.227.72.0-103.227.83.255,
                 103.227.100.0/22, 103.227.120.0/22,
                 103.227.132.0-103.227.139.255, 103.227.196.0/22,
                 103.227.204.0-103.227.206.255, 103.227.212.0/22,
                 103.227.228.0/22, 103.228.12.0/22,
                 103.228.88.0/22, 103.228.136.0/22,
                 103.228.160.0/22, 103.228.176.0/22,
                 103.228.196.0/22, 103.228.204.0-103.228.211.255,
                 103.228.228.0-103.228.235.255, 103.229.20.0/22,
                 103.229.136.0/22, 103.229.148.0/22,
                 103.229.172.0/22, 103.229.212.0-103.229.223.255,
                 103.229.228.0/22, 103.229.236.0-103.229.243.255,
                 103.230.0.0/22, 103.230.28.0/22,
                 103.230.40.0/21, 103.230.96.0/22,
                 103.230.196.0-103.230.207.255, 103.230.212.0/22,
                 103.230.236.0/22, 103.231.16.0/21,
                 103.231.64.0/21, 103.231.144.0/22,
                 103.231.180.0/22, 103.231.244.0/22,
                 103.232.4.0/22, 103.232.17.168/29,
                 103.232.144.0/22, 103.232.214.0/24,
                 103.233.4.0/22, 103.233.44.0/22,
                 103.233.52.0/22, 103.233.104.0/22,
                 103.233.128.0/22, 103.233.136.0/22,
                 103.233.162.0-103.233.167.255, 103.233.184.0/22,
                 103.233.228.0/22, 103.234.0.0/22,
                 103.234.20.0/22, 103.234.56.0/22,
                 103.234.124.0-103.234.131.255, 103.234.172.0/22,
                 103.234.180.0/22, 103.234.244.0/22,
                 103.235.56.0/21, 103.235.80.0/22,
                 103.235.85.0/24, 103.235.87.0/24,
                 103.235.128.0-103.235.151.255, 103.235.180.0-103.235.187.255,
                 103.235.192.0/22, 103.235.200.0/22,
                 103.235.216.0-103.236.75.255, 103.236.77.0-103.236.99.255,
                 103.236.120.0/22, 103.236.184.0/22,
                 103.236.240.0-103.237.15.255, 103.237.24.0/21,
                 103.237.68.0-103.237.75.255, 103.237.88.0/22,
                 103.237.152.0/22, 103.237.176.0-103.238.7.255,
                 103.238.16.0-103.238.59.255, 103.238.88.0-103.238.99.255,
                 103.238.132.0/22, 103.238.140.0-103.238.147.255,
                 103.238.160.0/22, 103.238.165.0-103.238.191.255,
                 103.238.196.0/22, 103.238.204.0/22,
                 103.238.252.0-103.239.3.255, 103.239.44.0/22,
                 103.239.68.0/22, 103.239.152.0/21,
                 103.239.180.0-103.239.187.255, 103.239.192.0/21,
                 103.239.204.0-103.239.211.255, 103.239.224.0/22,
                 103.239.240.0/20, 103.240.16.0/22,
                 103.240.36.0/22, 103.240.72.0/22,
                 103.240.84.0/22, 103.240.124.0/22,
                 103.240.172.0/22, 103.240.188.0/22,
                 103.240.244.0/22, 103.241.12.0/22,
                 103.241.92.0-103.241.99.255, 103.241.160.0/22,
                 103.241.184.0/21, 103.241.220.0/22,
                 103.242.64.0/23, 103.242.128.0/23,
                 103.242.160.0/22, 103.242.168.0/21,
                 103.242.177.0-103.242.179.255, 103.242.200.0-103.242.209.255,
                 103.242.212.0/22, 103.242.220.0/22,
                 103.242.233.0/24, 103.242.240.0/22,
                 103.242.252.0/22, 103.243.136.0/22,
                 103.243.252.0/22, 103.244.16.0/22,
                 103.244.56.0-103.244.87.255, 103.244.164.0/22,
                 103.244.232.0/22, 103.244.252.0/22,
                 103.245.23.0/24, 103.245.52.0/22,
                 103.245.60.0/22, 103.245.80.0/22,
                 103.245.124.0-103.245.131.255, 103.246.8.0/21,
                 103.246.120.0/21, 103.246.132.0/22,
                 103.246.152.0/21, 103.247.168.0-103.247.179.255,
                 103.247.200.0/22, 103.247.212.0/22,
                 103.248.0.0/23, 103.248.64.0/22,
                 103.248.100.0/22, 103.248.124.0/22,
                 103.248.152.0/22, 103.248.168.0/22,
                 103.248.192.0/22, 103.248.212.0/22,
                 103.248.224.0/21, 103.249.8.0/21,
                 103.249.52.0/22, 103.249.128.0/22,
                 103.249.136.0/22, 103.249.144.0/22,
                 103.249.164.0-103.249.179.255, 103.249.188.0-103.249.195.255,
                 103.249.244.0/22, 103.249.252.0/22,
                 103.250.32.0/22, 103.250.104.0/22,
                 103.250.124.0/22, 103.250.180.0/22,
                 103.250.192.0/22, 103.250.216.0/22,
                 103.250.224.0/22, 103.250.236.0/22,
                 103.250.248.0/21, 103.251.32.0/22,
                 103.251.84.0/22, 103.251.96.0/22,
                 103.251.124.0/22, 103.251.160.0/22,
                 103.251.192.0/22, 103.251.204.0/22,
                 103.251.236.0/23, 103.251.239.0-103.251.243.255,
                 103.252.28.0/22, 103.252.36.0/22,
                 103.252.64.0/22, 103.252.96.0/22,
                 103.252.104.0/22, 103.252.172.0/22,
                 103.252.204.0-103.252.211.255, 103.252.232.0/22,
                 103.252.248.0/22, 103.253.4.0/22,
                 103.253.60.0/22, 103.253.204.0/22,
                 103.253.220.0-103.253.227.255, 103.253.232.0/22,
                 103.254.8.0/22, 103.254.20.0/22,
                 103.254.64.0/21, 103.254.76.0/22,
                 103.254.112.0/22, 103.254.176.0/22,
                 103.254.188.0/22, 103.255.68.0/22,
                 103.255.88.0/21, 103.255.136.0/21,
                 103.255.184.0/22, 103.255.200.0/22,
                 103.255.208.0/22, 103.255.228.0/22,
                 106.0.0.0/24, 106.0.2.0-106.0.31.255,
                 106.0.44.0/22, 106.0.64.0/18,
                 106.2.0.0/16, 106.3.16.0-106.3.83.255,
                 106.3.88.0-106.9.255.255, 106.11.0.0-106.48.12.255,
                 106.48.14.0-106.48.255.255, 106.49.1.0-106.49.96.255,
                 106.49.98.0-106.50.255.255, 106.52.0.0-106.63.255.255,
                 106.74.0.0-106.75.191.255, 106.75.201.0/24,
                 106.75.204.0-106.75.255.255, 106.80.0.0/12,
                 106.108.0.0-106.127.255.255, 106.224.0.0/12,
                 107.176.0.0/15, 109.71.4.0/24,
                 109.244.0.0/16, 110.6.0.0/15,
                 110.16.0.0/14, 110.34.40.0/21,
                 110.40.0.0/14, 110.44.12.0/22,
                 110.44.144.0/20, 110.48.0.0/16,
                 110.51.0.0-110.53.255.255, 110.56.0.0-110.65.255.255,
                 110.72.0.0/15, 110.75.0.0-110.76.63.255,
                 110.76.132.0/22, 110.76.156.0/22,
                 110.76.184.0/22, 110.76.192.0-110.77.127.255,
                 110.80.0.0-110.91.255.255, 110.92.68.0/22,
                 110.93.32.0/19, 110.94.0.0-110.127.255.255,
                 110.152.0.0-110.157.255.255, 110.165.33.0-110.165.63.255,
                 110.166.0.0/15, 110.172.192.0-110.173.47.255,
                 110.173.64.0/19, 110.173.112.0/20,
                 110.173.192.0/19, 110.176.0.0-110.223.255.255,
                 110.228.0.0/14, 110.232.32.0/19,
                 110.236.0.0/15, 110.240.0.0-111.63.255.255,
                 111.66.0.0/16, 111.67.192.0/20,
                 111.68.64.0/19, 111.72.0.0/13,
                 111.85.0.0/16, 111.91.192.0/19,
                 111.92.248.0/21, 111.112.0.0-111.117.255.255,
                 111.118.200.0/21, 111.119.64.0-111.119.159.255,
                 111.120.0.0-111.124.255.255, 111.126.0.0-111.167.255.255,
                 111.170.0.0/16, 111.172.0.0-111.183.255.255,
                 111.186.0.0/15, 111.192.0.0-111.215.255.255,
                 111.221.28.0/24, 111.221.128.0-111.222.255.255,
                 111.223.4.0-111.223.19.255, 111.223.240.0/22,
                 111.223.248.0/22, 111.224.0.0/13,
                 111.235.96.0/19, 111.235.156.0-111.235.167.255,
                 111.235.169.0-111.235.191.255, 112.0.0.0-112.67.255.255,
                 112.73.64.0/18, 112.74.0.0/15,
                 112.80.0.0-112.103.255.255, 112.109.128.0/17,
                 112.111.0.0-112.117.255.255, 112.122.0.0-112.132.255.255,
                 112.137.48.0/21, 112.192.0.0/14,
                 112.224.0.0-113.9.255.255, 113.11.192.0/19,
                 113.12.0.0-113.18.255.255, 113.21.232.0-113.21.234.255,
                 113.21.236.0/22, 113.24.0.0/14,
                 113.31.0.0/16, 113.44.0.0-113.51.255.255,
                 113.52.160.0/19, 113.52.228.0/22,
                 113.54.0.0-113.59.127.255, 113.59.224.0/22,
                 113.62.0.0-113.129.255.255, 113.130.96.0-113.130.119.255,
                 113.132.0.0-113.143.255.255, 113.194.0.0/15,
                 113.197.100.0-113.197.107.255, 113.200.0.0-113.202.255.255,
                 113.204.0.0/14, 113.208.96.0-113.209.255.255,
                 113.212.0.0/18, 113.212.100.0/22,
                 113.212.184.0/21, 113.213.0.0/17,
                 113.214.0.0/15, 113.218.0.0-113.251.255.255,
                 114.28.0.0-114.28.235.255, 114.28.237.0-114.28.255.255,
                 114.31.64.0/21, 114.54.0.0/15,
                 114.60.0.0-114.68.255.255, 114.79.64.0/18,
                 114.80.0.0-114.107.255.255, 114.110.0.0/20,
                 114.110.64.0/18, 114.111.0.0/19,
                 114.111.160.0/19, 114.112.4.0-114.112.11.255,
                 114.112.18.0/23, 114.112.24.0-114.112.127.255,
                 114.112.129.0/24, 114.112.136.0-114.112.223.255,
                 114.113.0.0-114.113.135.255, 114.113.140.0-114.119.127.255,
                 114.119.192.0/18, 114.132.0.0/16,
                 114.135.0.0/16, 114.138.0.0/15,
                 114.141.64.0/21, 114.141.80.0/21,
                 114.141.128.0/18, 114.142.136.0/24,
                 114.196.0.0/15, 114.198.248.0/21,
                 114.208.0.0-114.255.255.255, 115.24.0.0-115.29.255.255,
                 115.31.64.0/22, 115.31.72.0/21,
                 115.32.0.0/14, 115.42.56.0/22,
                 115.44.0.0-115.63.255.255, 115.69.64.0/20,
                 115.84.0.0/18, 115.84.192.0/19,
                 115.85.192.0/18, 115.100.0.0-115.107.255.255,
                 115.120.0.0/14, 115.124.16.0/20,
                 115.148.0.0-115.159.255.255, 115.166.64.0/19,
                 115.168.0.0/13, 115.180.0.0/14,
                 115.187.0.0/20, 115.190.0.0-115.239.255.255,
                 116.0.8.0/21, 116.0.24.0/21,
                 116.1.0.0-116.11.255.255, 116.13.0.0/16,
                 116.16.0.0/12, 116.50.0.0/20,
                 116.52.0.0-116.57.255.255, 116.58.128.0/20,
                 116.58.208.0/20, 116.60.0.0/14,
                 116.66.0.0/17, 116.68.136.0/21,
                 116.68.176.0/21, 116.69.0.0-116.70.127.255,
                 116.76.0.0/14, 116.85.0.0/16,
                 116.89.144.0/20, 116.90.80.0/20,
                 116.90.184.0/21, 116.95.0.0/16,
                 116.112.0.0-116.117.255.255, 116.128.0.0-116.192.255.255,
                 116.193.16.0-116.193.63.255, 116.193.176.0/21,
                 116.194.0.0-116.196.255.255, 116.197.160.0/21,
                 116.197.180.0/23, 116.198.0.0-116.199.159.255,
                 116.204.0.0/17, 116.204.156.0/23,
                 116.204.159.0/24, 116.204.170.0/23,
                 116.204.176.0/22, 116.204.184.0/23,
                 116.204.187.0/24, 116.204.192.0/22,
                 116.204.210.0/23, 116.204.216.0/22,
                 116.204.224.0-116.205.255.255, 116.207.0.0-116.211.255.255,
                 116.212.160.0/20, 116.213.64.0-116.213.255.255,
                 116.214.32.0-116.214.79.255, 116.214.128.0-116.219.255.255,
                 116.224.0.0/12, 116.242.0.0-116.249.255.255,
                 116.251.64.0/24, 116.251.67.0-116.251.67.39,
                 116.251.67.44-116.251.67.127, 116.251.67.160/28,
                 116.251.67.180-116.251.67.215, 116.251.67.220-116.251.71.255,
                 116.251.73.0-116.251.73.99, 116.251.73.104/30,
                 116.251.73.112-116.251.73.159, 116.251.73.168-116.251.73.183,
                 116.251.73.200-116.251.74.87, 116.251.74.96/30,
                 116.251.74.112-116.251.74.199, 116.251.74.204-116.251.74.211,
                 116.251.74.216/30, 116.251.74.224-116.251.74.243,
                 116.251.75.0-116.251.75.47, 116.251.75.52/30,
                 116.251.75.64-116.251.76.255, 116.251.77.8-116.251.80.199,
                 116.251.80.204/30, 116.251.80.212-116.251.81.83,
                 116.251.81.88/29, 116.251.81.100-116.251.81.131,
                 116.251.81.140-116.251.81.215, 116.251.81.232-116.251.81.247,
                 116.251.82.8-116.251.82.19, 116.251.82.24-116.251.82.35,
                 116.251.82.40/30, 116.251.82.48/29,
                 116.251.82.64-116.251.82.75, 116.251.82.80/30,
                 116.251.82.88-116.251.109.2, 116.251.109.11-116.251.127.255,
                 116.252.0.0/15, 116.254.104.0/21,
                 116.254.128.0/17, 116.255.128.0/17,
                 117.8.0.0/13, 117.21.0.0-117.45.255.255,
                 117.48.0.0/14, 117.53.48.0/20,
                 117.53.176.0/20, 117.57.0.0-117.58.127.255,
                 117.59.0.0-117.73.255.255, 117.74.64.0/19,
                 117.74.128.0-117.95.255.255, 117.100.0.0/15,
                 117.103.16.0/20, 117.103.40.0/21,
                 117.103.72.0/21, 117.103.128.0/20,
                 117.104.168.0/21, 117.106.0.0/15,
                 117.112.0.0/13, 117.120.64.0-117.121.199.255,
                 117.122.128.0/17, 117.124.0.0-117.191.255.255,
                 118.24.0.0-118.26.35.255, 118.26.40.0-118.26.103.255,
                 118.26.112.0/21, 118.26.121.0-118.26.125.255,
                 118.26.128.0/17, 118.28.0.0/14,
                 118.64.0.0-118.66.255.255, 118.67.112.0/20,
                 118.72.0.0-118.81.255.255, 118.84.0.0/15,
                 118.88.32.0-118.89.255.255, 118.91.240.0/20,
                 118.102.16.0-118.102.39.255, 118.103.164.0-118.103.179.255,
                 118.112.0.0-118.125.255.255, 118.126.1.0-118.126.18.255,
                 118.126.32.0-118.126.255.255, 118.127.128.0/19,
                 118.132.0.0/14, 118.144.0.0/14,
                 118.178.0.0/16, 118.180.0.0/14,
                 118.184.5.0/24, 118.184.128.0/17,
                 118.186.0.0-118.188.255.255, 118.190.0.0-118.193.7.255,
                 118.193.96.0/19, 118.194.0.0-118.194.227.255,
                 118.194.240.0/21, 118.195.0.0-118.199.255.255,
                 118.202.0.0-118.207.255.255, 118.212.0.0/15,
                 118.215.192.0/18, 118.224.0.0-118.230.255.255,
                 118.239.0.0/16, 118.242.0.0/16,
                 118.244.0.0-119.2.31.255, 119.2.128.0-119.7.255.255,
                 119.10.0.0/17, 119.15.136.0/21,
                 119.16.0.0/16, 119.18.192.0-119.18.215.255,
                 119.18.224.0-119.23.255.255, 119.27.64.0-119.27.255.255,
                 119.28.28.0/24, 119.29.0.0/16,
                 119.30.48.0/20, 119.31.192.0/19,
                 119.32.0.0-119.38.223.255, 119.39.0.0-119.40.79.255,
                 119.40.128.0-119.42.31.255, 119.42.128.0/20,
                 119.42.224.0/19, 119.44.0.0/15,
                 119.48.0.0/13, 119.57.0.0-119.58.255.255,
                 119.59.128.0-119.62.255.255, 119.63.32.0/19,
                 119.75.208.0/20, 119.78.0.0-119.80.255.255,
                 119.82.208.0/20, 119.84.0.0-119.89.137.255,
                 119.89.139.0-119.89.181.255, 119.89.183.0-119.89.194.255,
                 119.89.196.0-119.89.215.255, 119.89.217.0-119.91.255.255,
                 119.96.0.0/13, 119.108.0.0/15,
                 119.112.0.0-119.147.255.255, 119.148.160.0/19,
                 119.151.192.0/18, 119.160.200.0/21,
                 119.161.120.0-119.161.135.255, 119.161.160.0-119.167.255.255,
                 119.176.0.0/12, 119.232.0.0/15,
                 119.235.128.0-119.235.175.255, 119.235.181.0-119.235.187.255,
                 119.248.0.0/14, 119.252.96.0/21,
                 119.252.240.0-119.252.249.255, 119.252.251.0-119.252.253.255,
                 119.253.0.0-120.15.255.255, 120.24.0.0/14,
                 120.30.0.0-120.49.255.255, 120.52.0.0/14,
                 120.64.0.0/13, 120.72.32.0/19,
                 120.72.128.0/17, 120.76.0.0-120.87.255.255,
                 120.88.8.0/21, 120.90.0.0-120.92.195.255,
                 120.92.198.0-120.92.255.255, 120.94.0.0/15,
                 120.128.0.0/13, 120.136.16.0/21,
                 120.136.128.0/18, 120.137.0.0/17,
                 120.143.128.0/19, 120.192.0.0/10,
                 121.0.8.0-121.0.31.255, 121.4.0.0/15,
                 121.8.0.0-121.43.255.255, 121.46.0.0/18,
                 121.46.76.0-121.46.83.255, 121.46.120.0-121.49.255.255,
                 121.50.8.0/21, 121.51.0.0/16,
                 121.52.160.0/19, 121.52.208.0-121.52.255.255,
                 121.54.176.0/21, 121.55.0.0/18,
                 121.56.0.0-121.58.127.255, 121.58.136.0-121.58.167.255,
                 121.59.0.0-121.59.16.255, 121.59.18.0-121.63.255.255,
                 121.68.0.0/14, 121.76.0.0/15,
                 121.79.128.0/18, 121.89.0.0/16,
                 121.91.104.0/21, 121.100.128.0-121.101.63.255,
                 121.101.208.0/20, 121.192.0.0/13,
                 121.200.192.0/21, 121.201.0.0/16,
                 121.204.0.0/14, 121.224.0.0/12,
                 121.248.0.0/14, 121.255.0.0/16,
                 122.0.64.0-122.0.255.255, 122.4.0.0-122.8.127.255,
                 122.8.192.0-122.9.255.255, 122.10.128.0-122.10.151.255,
                 122.10.160.0/24, 122.10.162.0-122.10.197.255,
                 122.10.216.0/22, 122.10.228.0-122.10.245.255,
                 122.10.247.0/24, 122.10.250.0/23,
                 122.11.0.0/17, 122.12.0.0-122.14.128.255,
                 122.14.152.0/24, 122.14.172.0/24,
                 122.14.183.0/24, 122.14.192.0/18,
                 122.48.0.0-122.49.63.255, 122.51.0.0/16,
                 122.64.0.0-122.97.255.255, 122.98.144.0-122.98.167.255,
                 122.98.172.0-122.98.199.255, 122.98.232.0-122.98.255.255,
                 122.102.0.0/20, 122.102.64.0/19,
                 122.112.0.0-122.112.99.255, 122.112.104.0/23,
                 122.112.107.0/24, 122.112.109.0/24,
                 122.112.113.0/24, 122.112.118.0/24,
                 122.112.122.0-122.112.125.255, 122.112.128.0-122.115.63.255,
                 122.115.68.0/23, 122.115.80.0-122.115.255.255,
                 122.119.0.0/16, 122.128.100.0/22,
                 122.128.120.0/21, 122.136.0.0/13,
                 122.144.128.0/17, 122.152.192.0/18,
                 122.156.0.0/14, 122.188.0.0-122.195.255.255,
                 122.198.0.0/16, 122.200.40.0/21,
                 122.200.64.0/18, 122.201.48.0/20,
                 122.204.0.0/14, 122.224.0.0-122.247.255.255,
                 122.248.24.0/21, 122.248.48.0/20,
                 122.255.64.0/21, 123.0.128.0/18,
                 123.4.0.0-123.15.255.255, 123.49.128.0/17,
                 123.50.160.0/19, 123.52.0.0-123.58.191.255,
                 123.58.224.0-123.62.255.255, 123.64.0.0-123.98.127.255,
                 123.99.128.0-123.100.31.255, 123.100.232.0/24,
                 123.101.0.0/16, 123.103.0.0/17,
                 123.108.128.0/23, 123.108.131.0-123.108.132.255,
                 123.108.134.0-123.108.143.255, 123.108.208.0/20,
                 123.112.0.0-123.135.255.255, 123.137.0.0-123.139.255.255,
                 123.144.0.0-123.175.255.255, 123.176.60.0/22,
                 123.176.80.0/20, 123.177.0.0-123.191.255.255,
                 123.196.0.0/15, 123.199.128.0/17,
                 123.206.0.0/15, 123.232.0.0/14,
                 123.242.0.0/17, 123.242.192.0/21,
                 123.244.0.0/14, 123.249.0.0/16,
                 123.253.0.0-123.253.95.255, 123.253.132.0-123.253.199.255,
                 123.253.240.0/22, 123.253.245.0-123.253.255.255,
                 123.254.96.0/21, 124.6.64.0/18,
                 124.14.0.0-124.17.255.255, 124.20.0.0/14,
                 124.28.192.0-124.29.127.255, 124.31.0.0/16,
                 124.40.112.0-124.40.223.255, 124.40.240.0/22,
                 124.42.0.0/16, 124.47.0.0/18,
                 124.64.0.0-124.66.127.255, 124.67.0.0-124.68.242.255,
                 124.68.244.0/23, 124.68.248.0-124.79.255.255,
                 124.88.0.0/13, 124.108.8.0/21,
                 124.108.40.0/21, 124.109.96.0/21,
                 124.112.0.0/13, 124.126.0.0-124.135.255.255,
                 124.147.128.0/17, 124.150.137.0/24,
                 124.151.0.0-124.152.255.255, 124.160.0.0/13,
                 124.172.0.0/14, 124.192.0.0/15,
                 124.196.0.0/16, 124.200.0.0/13,
                 124.220.0.0-124.240.191.255, 124.242.0.0/16,
                 124.243.192.0/18, 124.248.0.0/17,
                 124.249.0.0-124.251.255.255, 124.254.0.0/18,
                 125.31.192.0-125.47.255.255, 125.58.128.0/17,
                 125.61.128.0-125.62.63.255, 125.64.0.0-125.98.255.255,
                 125.104.0.0-125.127.255.255, 125.169.0.0/16,
                 125.171.0.0/16, 125.208.0.0/18,
                 125.210.0.0/15, 125.213.0.0/17,
                 125.214.96.0/19, 125.215.0.0/18,
                 125.216.0.0/13, 125.254.128.0/17,
                 128.108.0.0/16, 129.28.0.0/16,
                 129.204.0.0/16, 129.211.0.0/16,
                 129.250.8.38, 129.250.8.94,
                 129.250.66.54, 129.250.66.62,
                 129.250.66.90, 130.36.146.0/23,
                 130.214.218.0/23, 131.228.96.0/24,
                 131.253.12.0/29, 131.253.12.80/28,
                 131.253.12.240/29, 132.232.0.0/16,
                 132.237.134.0/24, 134.175.0.0/16,
                 135.159.208.0/20, 135.244.80.0/20,
                 137.59.59.0/24, 137.59.88.0/22,
                 138.32.244.0/24, 139.5.56.0/21,
                 139.5.80.0/22, 139.5.92.0/22,
                 139.5.128.0/22, 139.5.160.0/22,
                 139.5.192.0/22, 139.5.204.0/22,
                 139.5.244.0/22, 139.9.0.0/16,
                 139.129.0.0/16, 139.138.238.0/28,
                 139.148.0.0/16, 139.155.0.0/16,
                 139.159.0.0-139.159.43.255, 139.159.49.0-139.159.49.8,
                 139.159.49.11-139.159.49.255, 139.159.52.0-139.159.117.255,
                 139.159.120.0-139.159.255.255, 139.170.0.0/16,
                 139.176.0.0/16, 139.183.0.0/16,
                 139.186.0.0/16, 139.189.0.0/16,
                 139.196.0.0-139.198.63.255, 139.198.66.0-139.198.111.255,
                 139.198.114.0-139.198.119.255, 139.198.122.0-139.215.255.255,
                 139.217.0.0/16, 139.219.0.0-139.221.255.255,
                 139.224.0.0/16, 139.226.0.0/15,
                 140.75.0.0/16, 140.101.208.0/24,
                 140.143.0.0/16, 140.179.0.0/16,
                 140.205.0.0-140.207.255.255, 140.210.0.0/16,
                 140.224.0.0/16, 140.237.0.0/16,
                 140.240.0.0/16, 140.242.223.0-140.242.224.255,
                 140.243.0.0/16, 140.246.0.0/16,
                 140.249.0.0-140.250.255.255, 140.255.0.0/16,
                 142.70.0.0/16, 142.86.0.0/16,
                 143.64.0.0/16, 144.0.0.0/16,
                 144.7.0.0/16, 144.12.0.0/16,
                 144.36.146.0/23, 144.48.12.0/22,
                 144.48.64.0/22, 144.48.88.0/22,
                 144.48.156.0/22, 144.48.180.0-144.48.187.255,
                 144.48.204.0-144.48.215.255, 144.52.0.0/16,
                 144.123.0.0/16, 144.211.80.0/24,
                 144.211.138.0/24, 144.255.0.0/16,
                 146.56.192.0/18, 146.196.56.0/22,
                 146.196.68.0/22, 146.196.92.0/22,
                 146.196.112.0/21, 146.196.124.0/22,
                 146.217.137.0/24, 146.222.79.0/24,
                 146.222.81.0/24, 146.222.94.0/24,
                 147.243.14.32/27, 147.243.29.192/26,
                 147.243.30.64-147.243.30.159, 147.243.103.0/25,
                 148.70.0.0/16, 149.129.37.38-149.129.37.147,
                 150.0.0.0/16, 150.115.0.0/16,
                 150.121.0.0-150.122.255.255, 150.129.136.0/22,
                 150.129.192.0/22, 150.129.252.0/22,
                 150.138.0.0/15, 150.158.0.0/16,
                 150.222.88.0/23, 150.223.0.0/16,
                 150.242.0.0-150.242.11.255, 150.242.28.0/22,
                 150.242.44.0-150.242.59.255, 150.242.76.0-150.242.83.255,
                 150.242.92.0-150.242.99.255, 150.242.112.0-150.242.123.255,
                 150.242.152.0/22, 150.242.160.0-150.242.171.255,
                 150.242.184.0-150.242.195.255, 150.242.224.0/22,
                 150.242.232.0-150.242.251.255, 150.248.0.0/16,
                 150.255.0.0/16, 152.104.128.0/17,
                 152.136.0.0/16, 153.0.0.0/16,
                 153.3.0.0/16, 153.34.0.0-153.37.255.255,
                 153.99.0.0/16, 153.101.0.0/16,
                 153.118.0.0/15, 154.8.128.0/17,
                 155.126.176.0/23, 156.107.160.0/24,
                 156.107.170.0/24, 156.107.179.0/24,
                 156.107.181.0/24, 156.154.62.0/23,
                 157.0.0.0/16, 157.18.0.0/16,
                 157.61.0.0/16, 157.119.0.0/22,
                 157.119.8.0-157.119.19.255, 157.119.28.0/22,
                 157.119.132.0-157.119.167.255, 157.119.172.0/22,
                 157.119.192.0/21, 157.119.234.0/24,
                 157.119.240.0/22, 157.119.252.0/22,
                 157.122.0.0/16, 157.133.186.0/23,
                 157.133.192.0/21, 157.133.212.0/24,
                 157.133.236.0/24, 157.148.0.0/16,
                 157.156.0.0/16, 157.255.0.0/16,
                 158.60.0.0/16, 158.79.0.0/24,
                 158.79.2.0-158.79.255.255, 159.27.0.0/16,
                 159.75.0.0/16, 159.226.0.0/16,
                 160.19.208.0-160.19.219.255, 160.20.48.0/22,
                 160.62.10.0/24, 160.83.109.0-160.83.111.255,
                 160.202.60.0-160.202.62.255, 160.202.148.0-160.202.155.255,
                 160.202.212.0-160.202.255.255, 160.238.64.0/22,
                 161.120.0.0/16, 161.123.136.0/21,
                 161.163.0.0/21, 161.163.28.0/23,
                 161.189.0.0/16, 161.207.0.0/16,
                 162.14.0.0/16, 162.105.0.0/16,
                 163.0.0.0/16, 163.47.4.0/22,
                 163.53.0.0/20, 163.53.36.0-163.53.43.255,
                 163.53.48.0-163.53.67.255, 163.53.88.0-163.53.139.255,
                 163.53.160.0/20, 163.53.188.0/22,
                 163.53.220.0/22, 163.53.240.0/22,
                 163.125.0.0/16, 163.142.0.0/16,
                 163.177.0.0/16, 163.179.0.0/16,
                 163.204.0.0/16, 163.228.0.0/16,
                 163.244.246.0/24, 164.52.52.0/24,
                 164.52.80.0/24, 165.154.160.0-165.154.222.255,
                 165.156.30.0/24, 166.111.0.0/16,
                 167.139.0.0/16, 167.189.0.0/16,
                 167.220.244.0/22, 168.159.144.0-168.159.158.255,
                 168.160.0.0/16, 168.230.0.0/24,
                 170.179.0.0/16, 170.225.224.0/23,
                 170.252.152.0/21, 171.8.0.0/13,
                 171.34.0.0-171.47.255.255, 171.80.0.0/12,
                 171.104.0.0-171.127.255.255, 171.208.0.0/12,
                 172.81.192.0/18, 173.39.200.0/23,
                 175.0.0.0-175.27.255.255, 175.30.0.0/15,
                 175.42.0.0-175.44.255.255, 175.46.0.0-175.95.255.255,
                 175.102.0.0/16, 175.106.128.0/17,
                 175.111.144.0-175.111.175.255, 175.111.184.0/22,
                 175.146.0.0-175.155.255.255, 175.158.96.0/22,
                 175.160.0.0/12, 175.176.156.0/22,
                 175.176.188.0/22, 175.178.0.0/16,
                 175.184.128.0/18, 175.185.0.0-175.191.255.255,
                 178.171.110.0/23, 180.76.8.0/23,
                 180.76.15.0-180.79.255.255, 180.84.0.0-180.86.255.255,
                 180.88.0.0/14, 180.92.176.0/23,
                 180.94.56.0/21, 180.94.96.0/20,
                 180.94.120.0/21, 180.95.128.0-180.127.255.255,
                 180.129.128.0-180.130.255.255, 180.136.0.0/13,
                 180.148.16.0/21, 180.148.152.0/21,
                 180.148.216.0-180.148.255.255, 180.149.128.0/19,
                 180.150.160.0/19, 180.152.0.0-180.175.255.255,
                 180.178.112.0/21, 180.178.192.0/18,
                 180.184.0.0-180.188.127.255, 180.189.148.0/22,
                 180.200.252.0-180.203.255.255, 180.208.0.0/15,
                 180.210.212.0/22, 180.210.232.0/21,
                 180.212.0.0/15, 180.222.224.0-180.223.255.255,
                 180.233.0.0-180.233.95.255, 180.233.144.0/22,
                 180.235.64.0/19, 180.235.112.0/22,
                 182.16.144.0/21, 182.16.192.0/19,
                 182.18.0.0/17, 182.23.184.0/21,
                 182.23.200.0/21, 182.32.0.0/12,
                 182.48.96.0/19, 182.49.0.0-182.50.3.255,
                 182.50.8.0/21, 182.50.112.0/20,
                 182.51.0.0/16, 182.54.0.0/17,
                 182.54.244.0/22, 182.61.0.0-182.61.96.255,
                 182.61.98.0-182.61.255.255, 182.80.0.0-182.92.255.255,
                 182.96.0.0-182.151.255.255, 182.157.0.0/16,
                 182.160.64.0/19, 182.174.0.0/15,
                 182.200.0.0/13, 182.236.128.0/17,
                 182.237.24.0/21, 182.238.0.0-182.239.31.255,
                 182.240.0.0/13, 182.254.0.0/16,
                 183.0.0.0-183.71.255.255, 183.78.160.0/21,
                 183.78.180.0/22, 183.81.180.0/22,
                 183.84.0.0/15, 183.91.128.0/22,
                 183.91.136.0-183.91.159.255, 183.92.0.0/14,
                 183.128.0.0-183.170.255.255, 183.172.0.0/14,
                 183.184.0.0-183.255.255.255, 185.109.236.0/24,
                 188.131.128.0/17, 192.11.23.0/24,
                 192.11.26.0/24, 192.11.39.0/24,
                 192.11.236.0/24, 192.23.191.0/24,
                 192.55.10.0/23, 192.55.40.0/24,
                 192.55.46.0/24, 192.55.68.0/22,
                 192.102.204.0/22, 192.124.154.0/24,
                 192.137.31.0/24, 192.140.128.0-192.140.139.255,
                 192.140.156.0-192.140.215.255, 192.144.128.0/17,
                 192.163.11.0/24, 192.232.97.0/24,
                 193.17.120.0/22, 193.20.64.0/22,
                 193.112.0.0/16, 193.200.222.160/28,
                 194.138.136.0/24, 194.138.202.0/23,
                 194.138.245.0/24, 198.175.100.0/22,
                 198.208.17.0/24, 198.208.19.0/24,
                 198.208.30.0/24, 198.208.61.0/24,
                 198.208.63.0/24, 198.208.67.0/24,
                 198.208.112.0/23, 199.7.72.0/24,
                 199.65.192.0/21, 199.244.144.0/24,
                 202.0.100.0/23, 202.0.122.0/23,
                 202.0.176.0/22, 202.1.64.0/23,
                 202.1.68.0/23, 202.1.72.0-202.1.97.255,
                 202.1.100.0-202.1.107.255, 202.1.110.0-202.1.113.255,
                 202.3.128.0/23, 202.4.128.0/19,
                 202.4.252.0/22, 202.5.208.0-202.5.219.255,
                 202.6.6.0/23, 202.6.66.0/23,
                 202.6.72.0/23, 202.6.87.0-202.6.89.255,
                 202.6.92.0/23, 202.6.103.0/24,
                 202.6.108.0/24, 202.6.110.0/23,
                 202.6.114.0/24, 202.6.176.0/20,
                 202.8.0.0/24, 202.8.2.0-202.8.5.255,
                 202.8.12.0/24, 202.8.24.0/24,
                 202.8.77.0/24, 202.8.128.0/19,
                 202.8.192.0/20, 202.9.32.0/24,
                 202.9.34.0/23, 202.9.48.0/23,
                 202.9.51.0-202.9.54.255, 202.9.57.0-202.9.59.255,
                 202.10.64.0/21, 202.10.74.0-202.10.79.255,
                 202.10.112.0/20, 202.12.1.0-202.12.2.255,
                 202.12.17.0-202.12.19.255, 202.12.72.0/24,
                 202.12.84.0/23, 202.12.96.0/24,
                 202.12.98.0/23, 202.12.106.0/24,
                 202.12.111.0/24, 202.12.116.0/24,
                 202.14.64.0/23, 202.14.69.0/24,
                 202.14.73.0-202.14.76.255, 202.14.78.0/23,
                 202.14.88.0/24, 202.14.97.0/24,
                 202.14.104.0/23, 202.14.108.0/23,
                 202.14.111.0/24, 202.14.114.0/23,
                 202.14.118.0/23, 202.14.124.0/23,
                 202.14.127.0/24, 202.14.129.0/24,
                 202.14.135.0-202.14.136.255, 202.14.149.0/24,
                 202.14.151.0/24, 202.14.157.0-202.14.159.255,
                 202.14.169.0-202.14.176.255, 202.14.184.0/23,
                 202.14.208.0/23, 202.14.213.0/24,
                 202.14.219.0-202.14.220.255, 202.14.222.0/23,
                 202.14.225.0-202.14.227.255, 202.14.231.0/24,
                 202.14.235.0-202.14.239.255, 202.14.246.0/24,
                 202.14.251.0/24, 202.20.66.0/24,
                 202.20.79.0/24, 202.20.87.0-202.20.90.255,
                 202.20.94.0/23, 202.20.114.0/24,
                 202.20.117.0/24, 202.20.120.0/24,
                 202.20.125.0-202.20.127.255, 202.21.48.0/20,
                 202.21.131.0-202.21.132.255, 202.21.141.0-202.21.142.255,
                 202.21.147.0-202.21.148.255, 202.21.150.0-202.21.154.255,
                 202.21.156.0/24, 202.21.208.0/24,
                 202.22.248.0/21, 202.27.12.0/24,
                 202.27.14.0/24, 202.27.136.0/23,
                 202.36.226.0/24, 202.38.0.0/22,
                 202.38.8.0/21, 202.38.48.0-202.38.138.255,
                 202.38.140.0/22, 202.38.146.0/23,
                 202.38.149.0-202.38.156.255, 202.38.158.0-202.38.161.255,
                 202.38.164.0-202.38.171.255, 202.38.176.0/23,
                 202.38.184.0-202.38.255.255, 202.40.4.0/23,
                 202.40.7.0/24, 202.40.15.0/24,
                 202.40.135.0-202.40.136.255, 202.40.140.0/24,
                 202.40.143.0-202.40.145.255, 202.40.150.0/24,
                 202.40.155.0-202.40.156.255, 202.40.158.0/23,
                 202.40.162.0/24, 202.41.8.0/23,
                 202.41.11.0-202.41.13.255, 202.41.128.0/24,
                 202.41.130.0/23, 202.41.142.0/24,
                 202.41.152.0/21, 202.41.192.0/24,
                 202.41.196.0-202.41.203.255, 202.41.240.0/20,
                 202.43.76.0/22, 202.43.144.0/20,
                 202.44.16.0/20, 202.44.48.0/22,
                 202.44.67.0/24, 202.44.74.0/24,
                 202.44.97.0/24, 202.44.129.0/24,
                 202.44.132.0/23, 202.44.146.0/23,
                 202.45.0.0-202.45.2.255, 202.45.15.0-202.45.31.255,
                 202.46.16.0-202.46.18.255, 202.46.20.0/23,
                 202.46.59.0/24, 202.46.63.0/24,
                 202.46.128.0/24, 202.46.224.0/20,
                 202.47.82.0/23, 202.47.96.0/20,
                 202.47.126.0/24, 202.47.128.0/24,
                 202.47.130.0/23, 202.52.34.0/24,
                 202.52.143.0/24, 202.53.140.0/24,
                 202.53.143.0/24, 202.57.212.0-202.57.219.255,
                 202.57.240.0-202.58.0.255, 202.58.112.0/22,
                 202.59.0.0/23, 202.59.212.0/22,
                 202.59.236.0/24, 202.59.240.0/24,
                 202.60.48.0/21, 202.60.96.0/21,
                 202.60.112.0/20, 202.60.132.0-202.60.159.255,
                 202.61.68.0/22, 202.61.76.0/22,
                 202.61.88.0/22, 202.61.123.0/24,
                 202.61.127.0/24, 202.62.112.0/22,
                 202.62.248.0-202.62.252.255, 202.62.255.0/24,
                 202.63.80.0/20, 202.63.160.0/19,
                 202.63.248.0/22, 202.63.253.0/24,
                 202.65.0.0-202.65.9.255, 202.65.96.0/20,
                 202.66.169.0-202.66.171.255, 202.67.0.0/22,
                 202.69.4.0/23, 202.69.16.0/20,
                 202.70.0.0/19, 202.70.96.0/20,
                 202.70.192.0/20, 202.71.32.0/20,
                 202.72.40.0/21, 202.72.80.0/20,
                 202.72.112.0/20, 202.73.128.0/22,
                 202.73.240.0/20, 202.74.8.0/21,
                 202.74.36.0/24, 202.74.42.0/24,
                 202.74.52.0/24, 202.74.80.0/20,
                 202.74.254.0/23, 202.75.208.0/20,
                 202.75.252.0/22, 202.76.247.0/24,
                 202.76.252.0/22, 202.77.39.0/24,
                 202.77.80.0/21, 202.77.92.0/22,
                 202.78.8.0/21, 202.79.224.0/21,
                 202.79.248.0/22, 202.80.192.0/20,
                 202.81.0.0/22, 202.81.176.0/20,
                 202.83.252.0/22, 202.84.4.0-202.84.17.255,
                 202.84.22.0/24, 202.84.24.0/21,
                 202.85.208.0/20, 202.86.249.0/24,
                 202.86.252.0/22, 202.87.80.0/20,
                 202.88.32.0/22, 202.89.8.0/21,
                 202.89.96.0/22, 202.89.108.0/22,
                 202.89.119.0/24, 202.89.232.0/21,
                 202.90.0.0/22, 202.90.16.0/20,
                 202.90.37.0/24, 202.90.96.0/19,
                 202.90.193.0/24, 202.90.196.0/24,
                 202.90.205.0/24, 202.90.224.0/20,
                 202.91.0.0/22, 202.91.96.0/20,
                 202.91.128.0/22, 202.91.176.0/20,
                 202.91.224.0-202.92.3.255, 202.92.8.0/21,
                 202.92.48.0/20, 202.92.252.0-202.93.3.255,
                 202.93.252.0-202.94.31.255, 202.94.74.0/24,
                 202.94.81.0/24, 202.94.92.0/22,
                 202.95.1.0-202.95.7.255, 202.95.10.0-202.95.12.129,
                 202.95.13.0-202.95.20.255, 202.95.22.0-202.95.31.255,
                 202.95.240.0/21, 202.95.252.0-202.122.7.255,
                 202.122.32.0/21, 202.122.64.0/19,
                 202.122.112.0-202.122.128.255, 202.122.132.0/24,
                 202.123.96.0/20, 202.123.116.0-202.123.123.255,
                 202.124.16.0-202.124.27.255, 202.125.107.0/24,
                 202.125.109.0/24, 202.125.112.0/20,
                 202.125.176.0/20, 202.127.0.0/21,
                 202.127.12.0-202.127.31.255, 202.127.40.0-202.127.63.255,
                 202.127.112.0-202.127.167.255, 202.127.192.0-202.127.209.255,
                 202.127.212.0-202.127.255.255, 202.129.208.0/24,
                 202.130.0.0/19, 202.130.39.0/24,
                 202.130.224.0/19, 202.131.16.0/21,
                 202.131.52.0-202.131.56.255, 202.131.58.0-202.131.63.255,
                 202.131.208.0/20, 202.133.32.0/20,
                 202.134.58.0/24, 202.134.128.0/20,
                 202.134.208.0/20, 202.136.48.0/20,
                 202.136.208.0-202.136.239.255, 202.136.248.0/22,
                 202.136.254.0/23, 202.137.231.0/24,
                 202.140.140.0-202.140.159.255, 202.141.160.0/19,
                 202.142.16.0/20, 202.143.4.0/22,
                 202.143.16.0-202.143.47.255, 202.143.56.0/21,
                 202.143.100.0-202.143.107.255, 202.146.160.0/20,
                 202.146.186.0/24, 202.146.188.0/22,
                 202.146.196.0-202.146.207.255, 202.147.144.0/20,
                 202.148.32.0/20, 202.148.64.0/18,
                 202.149.32.0/19, 202.149.160.0/19,
                 202.149.224.0/19, 202.150.16.0-202.150.47.255,
                 202.150.56.0/22, 202.150.192.0/20,
                 202.150.224.0-202.151.3.255, 202.151.128.0/19,
                 202.152.176.0/20, 202.153.0.0/22,
                 202.153.7.0/24, 202.153.48.0/20,
                 202.157.192.0/19, 202.158.160.0/19,
                 202.158.242.0/24, 202.160.140.0/22,
                 202.160.156.0/22, 202.160.176.0/20,
                 202.162.67.0/24, 202.162.75.0/24,
                 202.164.0.0/20, 202.164.96.0/19,
                 202.165.96.0-202.165.107.255, 202.165.110.0/23,
                 202.165.176.0/20, 202.165.208.0/20,
                 202.165.239.0-202.165.241.255, 202.165.243.0/24,
                 202.165.245.0/24, 202.165.251.0-202.165.255.255,
                 202.166.224.0/19, 202.168.80.0/22,
                 202.168.128.0/20, 202.168.160.0/19,
                 202.170.128.0/19, 202.170.216.0-202.170.255.255,
                 202.171.216.0/21, 202.171.232.0/24,
                 202.171.235.0/24, 202.172.0.0/22,
                 202.172.7.0/24, 202.173.0.0/22,
                 202.173.6.0/24, 202.173.8.0/21,
                 202.173.112.0/22, 202.173.224.0/19,
                 202.174.64.0/20, 202.174.124.0/22,
                 202.176.224.0/19, 202.179.160.0/20,
                 202.179.240.0/20, 202.180.128.0/19,
                 202.180.208.0/21, 202.181.8.0/22,
                 202.181.28.0/22, 202.181.112.0/20,
                 202.182.32.0/20, 202.182.192.0/19,
                 202.189.0.0/18, 202.189.80.0/20,
                 202.189.184.0/21, 202.191.0.0/24,
                 202.191.68.0-202.191.95.255, 202.192.0.0/12,
                 203.0.4.0/22, 203.0.10.0/23,
                 203.0.18.0/24, 203.0.24.0/24,
                 203.0.42.0/23, 203.0.45.0-203.0.47.255,
                 203.0.81.0-203.0.83.255, 203.0.90.0/23,
                 203.0.96.0/23, 203.0.104.0/21,
                 203.0.114.0/23, 203.0.122.0/24,
                 203.0.128.0/24, 203.0.130.0-203.0.135.255,
                 203.0.137.0/24, 203.0.142.0/24,
                 203.0.144.0/24, 203.0.146.0/24,
                 203.0.148.0/24, 203.0.150.0-203.0.152.255,
                 203.0.177.0/24, 203.0.224.0/24,
                 203.1.4.0/22, 203.1.18.0/24,
                 203.1.26.0/23, 203.1.65.0-203.1.67.255,
                 203.1.70.0/23, 203.1.76.0/23,
                 203.1.90.0/24, 203.1.97.0-203.1.103.255,
                 203.1.108.0/24, 203.1.253.0-203.1.254.255,
                 203.2.64.0/21, 203.2.73.0/24,
                 203.2.112.0/21, 203.2.126.0/23,
                 203.2.140.0/24, 203.2.150.0/24,
                 203.2.152.0-203.2.157.255, 203.2.160.0/21,
                 203.2.180.0/23, 203.2.196.0/23,
                 203.2.209.0/24, 203.2.214.0/23,
                 203.2.226.0/23, 203.2.229.0/24,
                 203.2.236.0/23, 203.3.68.0/24,
                 203.3.72.0/23, 203.3.75.0/24,
                 203.3.80.0/21, 203.3.96.0/22,
                 203.3.105.0/24, 203.3.112.0-203.3.120.255,
                 203.3.123.0/24, 203.3.135.0/24,
                 203.3.139.0/24, 203.3.143.0/24,
                 203.4.132.0-203.4.134.255, 203.4.151.0-203.4.155.255,
                 203.4.174.0/23, 203.4.180.0/24,
                 203.4.186.0/24, 203.4.205.0/24,
                 203.4.208.0/22, 203.4.227.0/24,
                 203.4.230.0/23, 203.5.4.0/23,
                 203.5.7.0-203.5.9.255, 203.5.11.0/24,
                 203.5.21.0-203.5.22.255, 203.5.44.0/24,
                 203.5.46.0/23, 203.5.52.0-203.5.57.255,
                 203.5.60.0/23, 203.5.114.0/23,
                 203.5.118.0/24, 203.5.120.0/24,
                 203.5.172.0/24, 203.5.180.0-203.5.182.255,
                 203.5.185.0-203.5.186.255, 203.5.188.0-203.5.190.255,
                 203.5.195.0/24, 203.5.214.0/23,
                 203.5.218.0/23, 203.6.131.0/24,
                 203.6.136.0/24, 203.6.138.0/23,
                 203.6.142.0/24, 203.6.150.0/23,
                 203.6.157.0/24, 203.6.159.0/24,
                 203.6.224.0/20, 203.6.248.0/23,
                 203.7.129.0/24, 203.7.138.0/23,
                 203.7.147.0/24, 203.7.150.0/23,
                 203.7.158.0/24, 203.7.192.0/23,
                 203.7.200.0/24, 203.8.0.0/24,
                 203.8.8.0/24, 203.8.23.0/24,
                 203.8.26.0/24, 203.8.30.0/23,
                 203.8.70.0/24, 203.8.82.0/24,
                 203.8.86.0/23, 203.8.91.0/24,
                 203.8.110.0/23, 203.8.115.0/24,
                 203.8.166.0/23, 203.8.169.0/24,
                 203.8.173.0/24, 203.8.184.0/24,
                 203.8.186.0/23, 203.8.190.0-203.8.192.255,
                 203.8.197.0-203.8.199.255, 203.8.203.0/24,
                 203.8.209.0-203.8.215.255, 203.8.217.0/24,
                 203.8.220.0/24, 203.9.32.0/24,
                 203.9.36.0/23, 203.9.57.0/24,
                 203.9.63.0/24, 203.9.65.0/24,
                 203.9.70.0-203.9.72.255, 203.9.75.0-203.9.77.255,
                 203.9.96.0-203.9.101.255, 203.9.108.0/24,
                 203.9.158.0/24, 203.10.34.0/24,
                 203.10.56.0/24, 203.10.74.0/23,
                 203.10.84.0-203.10.88.255, 203.10.95.0/24,
                 203.10.125.0/24, 203.11.70.0/24,
                 203.11.76.0/22, 203.11.82.0/24,
                 203.11.84.0/22, 203.11.100.0/22,
                 203.11.109.0/24, 203.11.117.0/24,
                 203.11.122.0/24, 203.11.126.0/24,
                 203.11.136.0/22, 203.11.141.0-203.11.143.255,
                 203.11.180.0/22, 203.11.208.0/22,
                 203.12.16.0/24, 203.12.19.0/24,
                 203.12.24.0/24, 203.12.57.0/24,
                 203.12.65.0-203.12.66.255, 203.12.70.0/23,
                 203.12.87.0/24, 203.12.92.0/22,
                 203.12.100.0/23, 203.12.103.0/24,
                 203.12.114.0/24, 203.12.118.0/24,
                 203.12.130.0/24, 203.12.137.0/24,
                 203.12.196.0-203.12.207.255, 203.12.211.0/24,
                 203.12.219.0/24, 203.12.226.0/24,
                 203.12.240.0/22, 203.13.18.0/24,
                 203.13.24.0/24, 203.13.44.0/23,
                 203.13.80.0/25, 203.13.80.192/26,
                 203.13.82.0-203.13.89.255, 203.13.92.0/22,
                 203.13.173.0/24, 203.13.224.0/23,
                 203.13.227.0/24, 203.13.233.0/24,
                 203.14.24.0/22, 203.14.33.0/24,
                 203.14.56.0/24, 203.14.61.0-203.14.62.255,
                 203.14.104.0/24, 203.14.114.0/23,
                 203.14.118.0/24, 203.14.162.0/24,
                 203.14.184.0-203.14.192.255, 203.14.194.0/23,
                 203.14.214.0/24, 203.14.231.0/24,
                 203.14.246.0/24, 203.15.0.0/20,
                 203.15.20.0-203.15.22.255, 203.15.87.0-203.15.89.255,
                 203.15.105.0/24, 203.15.112.0/21,
                 203.15.130.0/23, 203.15.149.0/24,
                 203.15.151.0/24, 203.15.156.0/22,
                 203.15.174.0/24, 203.15.227.0/24,
                 203.15.232.0-203.15.241.255, 203.15.246.0/24,
                 203.16.10.0/24, 203.16.12.0/23,
                 203.16.16.0/21, 203.16.27.0/24,
                 203.16.38.0/24, 203.16.49.0-203.16.51.255,
                 203.16.58.0/24, 203.16.63.0/24,
                 203.16.133.0/24, 203.16.161.0-203.16.162.255,
                 203.16.186.0/23, 203.16.228.0/24,
                 203.16.238.0/24, 203.16.240.0/24,
                 203.16.245.0/24, 203.17.2.0/24,
                 203.17.18.0/24, 203.17.28.0/24,
                 203.17.39.0/24, 203.17.56.0/24,
                 203.17.74.0/23, 203.17.88.0/23,
                 203.17.136.0/24, 203.17.164.0/24,
                 203.17.187.0/24, 203.17.190.0/23,
                 203.17.231.0/24, 203.17.233.0/24,
                 203.17.248.0/23, 203.17.255.0/24,
                 203.18.2.0-203.18.4.255, 203.18.7.0/24,
                 203.18.31.0/24, 203.18.37.0/24,
                 203.18.48.0/23, 203.18.52.0/24,
                 203.18.72.0/22, 203.18.80.0/23,
                 203.18.87.0/24, 203.18.100.0/23,
                 203.18.105.0/24, 203.18.107.0/24,
                 203.18.110.0/24, 203.18.129.0/24,
                 203.18.131.0-203.18.133.255, 203.18.144.0/24,
                 203.18.153.0/24, 203.18.199.0/24,
                 203.18.208.0/24, 203.18.211.0/24,
                 203.18.215.0/24, 203.19.1.0/24,
                 203.19.18.0/24, 203.19.24.0/24,
                 203.19.30.0/24, 203.19.32.0/22,
                 203.19.38.0/23, 203.19.41.0/24,
                 203.19.44.0-203.19.46.255, 203.19.58.0/24,
                 203.19.60.0/23, 203.19.64.0/24,
                 203.19.68.0/24, 203.19.72.0/24,
                 203.19.101.0/24, 203.19.111.0/24,
                 203.19.131.0/24, 203.19.133.0/24,
                 203.19.144.0/24, 203.19.147.0/24,
                 203.19.149.0/24, 203.19.156.0/24,
                 203.19.176.0/24, 203.19.178.0/23,
                 203.19.208.0/24, 203.19.228.0/22,
                 203.19.233.0/24, 203.19.242.0/24,
                 203.19.248.0/23, 203.19.255.0/24,
                 203.20.17.0/24, 203.20.40.0/23,
                 203.20.44.0/24, 203.20.48.0/24,
                 203.20.61.0/24, 203.20.65.0/24,
                 203.20.84.0/23, 203.20.89.0/24,
                 203.20.106.0/23, 203.20.115.0/24,
                 203.20.117.0-203.20.119.255, 203.20.122.0/24,
                 203.20.126.0/23, 203.20.135.0-203.20.143.255,
                 203.20.150.0/24, 203.20.230.0/24,
                 203.20.232.0/24, 203.20.236.0/24,
                 203.21.0.0-203.21.2.255, 203.21.8.0/24,
                 203.21.10.0/24, 203.21.18.0/24,
                 203.21.33.0-203.21.34.255, 203.21.41.0/24,
                 203.21.44.0/24, 203.21.68.0/24,
                 203.21.82.0/24, 203.21.96.0/22,
                 203.21.124.0/24, 203.21.136.0/23,
                 203.21.145.0/24, 203.21.206.0/24,
                 203.22.24.0/24, 203.22.28.0/23,
                 203.22.31.0/24, 203.22.68.0/24,
                 203.22.76.0/24, 203.22.78.0/24,
                 203.22.84.0/24, 203.22.87.0/24,
                 203.22.92.0/22, 203.22.99.0/24,
                 203.22.106.0/24, 203.22.122.0/23,
                 203.22.131.0/24, 203.22.163.0/24,
                 203.22.166.0/24, 203.22.170.0/24,
                 203.22.176.0/21, 203.22.194.0/24,
                 203.22.242.0/23, 203.22.245.0-203.22.246.255,
                 203.22.252.0/23, 203.23.0.0/24,
                 203.23.47.0/24, 203.23.61.0-203.23.63.255,
                 203.23.73.0/24, 203.23.85.0/24,
                 203.23.92.0/22, 203.23.98.0/24,
                 203.23.107.0/24, 203.23.112.0/24,
                 203.23.130.0/24, 203.23.140.0/23,
                 203.23.172.0/24, 203.23.182.0/24,
                 203.23.186.0/23, 203.23.192.0/24,
                 203.23.197.0-203.23.198.255, 203.23.204.0/22,
                 203.23.224.0/24, 203.23.226.0-203.23.231.255,
                 203.23.249.0/24, 203.23.251.0/24,
                 203.24.13.0/24, 203.24.18.0/24,
                 203.24.27.0/24, 203.24.43.0/24,
                 203.24.56.0/24, 203.24.58.0/24,
                 203.24.67.0/24, 203.24.74.0/24,
                 203.24.79.0-203.24.81.255, 203.24.84.0-203.24.86.255,
                 203.24.90.0/24, 203.24.111.0-203.24.112.255,
                 203.24.116.0/24, 203.24.122.0/23,
                 203.24.145.0/24, 203.24.152.0/23,
                 203.24.157.0/24, 203.24.161.0/24,
                 203.24.167.0/24, 203.24.186.0/23,
                 203.24.199.0/24, 203.24.202.0/24,
                 203.24.212.0/23, 203.24.217.0/24,
                 203.24.219.0/24, 203.24.244.0/24,
                 203.25.19.0-203.25.21.255, 203.25.46.0/24,
                 203.25.48.0/21, 203.25.64.0/23,
                 203.25.91.0/24, 203.25.99.0-203.25.100.255,
                 203.25.106.0/24, 203.25.131.0/24,
                 203.25.135.0/24, 203.25.138.0/24,
                 203.25.147.0/24, 203.25.153.0-203.25.155.255,
                 203.25.164.0/24, 203.25.166.0/24,
                 203.25.174.0/23, 203.25.180.0/24,
                 203.25.182.0/24, 203.25.191.0/24,
                 203.25.199.0-203.25.200.255, 203.25.202.0/23,
                 203.25.208.0/20, 203.25.229.0/24,
                 203.25.235.0-203.25.236.255, 203.25.242.0/24,
                 203.26.12.0/24, 203.26.34.0/24,
                 203.26.49.0-203.26.50.255, 203.26.55.0-203.26.57.255,
                 203.26.60.0/24, 203.26.65.0/24,
                 203.26.68.0/24, 203.26.76.0/24,
                 203.26.80.0/24, 203.26.84.0/24,
                 203.26.97.0/24, 203.26.102.0/23,
                 203.26.115.0-203.26.116.255, 203.26.129.0/24,
                 203.26.143.0-203.26.144.255, 203.26.148.0/23,
                 203.26.154.0/24, 203.26.158.0/23,
                 203.26.161.0/24, 203.26.170.0/24,
                 203.26.173.0/24, 203.26.176.0/24,
                 203.26.185.0/24, 203.26.202.0/23,
                 203.26.210.0/24, 203.26.214.0/24,
                 203.26.222.0/24, 203.26.224.0/24,
                 203.26.228.0/24, 203.26.232.0/24,
                 203.27.0.0/24, 203.27.10.0/24,
                 203.27.15.0-203.27.16.255, 203.27.20.0/24,
                 203.27.22.0/23, 203.27.40.0/24,
                 203.27.45.0/24, 203.27.53.0/24,
                 203.27.65.0-203.27.66.255, 203.27.81.0/24,
                 203.27.88.0/24, 203.27.102.0/24,
                 203.27.109.0/24, 203.27.117.0/24,
                 203.27.121.0-203.27.123.255, 203.27.125.0/24,
                 203.27.200.0/24, 203.27.202.0/24,
                 203.27.233.0/24, 203.27.241.0/24,
                 203.27.250.0/24, 203.28.10.0/24,
                 203.28.12.0/24, 203.28.33.0-203.28.35.255,
                 203.28.43.0-203.28.44.255, 203.28.54.0/24,
                 203.28.56.0/24, 203.28.73.0-203.28.74.255,
                 203.28.76.0/24, 203.28.86.0/24,
                 203.28.88.0/24, 203.28.112.0/24,
                 203.28.131.0/24, 203.28.136.0/24,
                 203.28.140.0/24, 203.28.145.0/24,
                 203.28.165.0/24, 203.28.169.0-203.28.170.255,
                 203.28.178.0/23, 203.28.185.0/24,
                 203.28.187.0/24, 203.28.196.0/24,
                 203.28.226.0/23, 203.28.239.0/24,
                 203.29.2.0/24, 203.29.8.0/23,
                 203.29.13.0-203.29.14.255, 203.29.28.0/24,
                 203.29.46.0/24, 203.29.57.0/24,
                 203.29.61.0/24, 203.29.63.0/24,
                 203.29.69.0/24, 203.29.73.0/24,
                 203.29.81.0/24, 203.29.90.0/24,
                 203.29.95.0/24, 203.29.100.0/24,
                 203.29.103.0/24, 203.29.112.0/24,
                 203.29.120.0/22, 203.29.182.0/23,
                 203.29.187.0/24, 203.29.189.0-203.29.190.255,
                 203.29.205.0/24, 203.29.210.0/24,
                 203.29.217.0/24, 203.29.227.0/24,
                 203.29.231.0/24, 203.29.233.0-203.29.234.255,
                 203.29.248.0/24, 203.29.254.0/23,
                 203.30.16.0/23, 203.30.25.0/24,
                 203.30.27.0/24, 203.30.29.0/24,
                 203.30.66.0/24, 203.30.81.0/24,
                 203.30.87.0/24, 203.30.111.0/24,
                 203.30.121.0/24, 203.30.123.0/24,
                 203.30.152.0/24, 203.30.156.0/24,
                 203.30.162.0/24, 203.30.173.0/24,
                 203.30.175.0/24, 203.30.187.0/24,
                 203.30.194.0/24, 203.30.217.0/24,
                 203.30.220.0/24, 203.30.222.0/24,
                 203.30.232.0/23, 203.30.235.0/24,
                 203.30.240.0/23, 203.30.246.0/24,
                 203.30.250.0/23, 203.31.45.0-203.31.46.255,
                 203.31.49.0/24, 203.31.51.0/24,
                 203.31.54.0/23, 203.31.69.0/24,
                 203.31.72.0/24, 203.31.80.0/24,
                 203.31.85.0/24, 203.31.97.0/24,
                 203.31.105.0-203.31.106.255, 203.31.108.0/23,
                 203.31.124.0/24, 203.31.162.0/24,
                 203.31.174.0/24, 203.31.177.0/24,
                 203.31.181.0/24, 203.31.187.0/24,
                 203.31.189.0/24, 203.31.204.0/24,
                 203.31.220.0/24, 203.31.222.0/23,
                 203.31.225.0/24, 203.31.229.0/24,
                 203.31.248.0/23, 203.31.253.0/24,
                 203.32.20.0/24, 203.32.48.0/23,
                 203.32.56.0/24, 203.32.60.0/24,
                 203.32.62.0/24, 203.32.68.0/23,
                 203.32.76.0/24, 203.32.81.0/24,
                 203.32.84.0/23, 203.32.95.0/24,
                 203.32.102.0/24, 203.32.105.0/24,
                 203.32.130.0/24, 203.32.133.0/24,
                 203.32.140.0/24, 203.32.152.0/24,
                 203.32.186.0/23, 203.32.192.0/24,
                 203.32.196.0/24, 203.32.203.0-203.32.205.255,
                 203.32.212.0/24, 203.33.4.0/24,
                 203.33.7.0/24, 203.33.12.0/23,
                 203.33.21.0/24, 203.33.26.0/24,
                 203.33.32.0/24, 203.33.63.0-203.33.64.255,
                 203.33.67.0-203.33.68.255, 203.33.73.0/24,
                 203.33.79.0/24, 203.33.100.0/24,
                 203.33.122.0/24, 203.33.129.0/24,
                 203.33.131.0/24, 203.33.145.0/24,
                 203.33.156.0/24, 203.33.158.0/23,
                 203.33.174.0/24, 203.33.185.0/24,
                 203.33.200.0/24, 203.33.202.0-203.33.204.255,
                 203.33.206.0/23, 203.33.214.0/23,
                 203.33.224.0-203.33.226.255, 203.33.233.0/24,
                 203.33.243.0/24, 203.33.250.0/24,
                 203.34.4.0/24, 203.34.21.0/24,
                 203.34.27.0/24, 203.34.39.0/24,
                 203.34.48.0/23, 203.34.54.0/24,
                 203.34.56.0/23, 203.34.67.0/24,
                 203.34.69.0/24, 203.34.76.0/24,
                 203.34.92.0/24, 203.34.106.0/24,
                 203.34.113.0/24, 203.34.147.0/24,
                 203.34.150.0/24, 203.34.152.0/23,
                 203.34.161.0-203.34.162.255, 203.34.187.0/24,
                 203.34.192.0/21, 203.34.204.0/22,
                 203.34.232.0/24, 203.34.240.0/24,
                 203.34.242.0/24, 203.34.245.0/24,
                 203.34.251.0/24, 203.55.2.0-203.55.4.255,
                 203.55.10.0/24, 203.55.13.0/24,
                 203.55.22.0/24, 203.55.30.0/24,
                 203.55.93.0/24, 203.55.101.0/24,
                 203.55.109.0-203.55.110.255, 203.55.116.0/23,
                 203.55.119.0/24, 203.55.128.0/23,
                 203.55.146.0/23, 203.55.192.0/24,
                 203.55.196.0/24, 203.55.218.0/23,
                 203.55.221.0/24, 203.55.224.0/24,
                 203.56.1.0/24, 203.56.4.0/24,
                 203.56.12.0/24, 203.56.24.0/24,
                 203.56.38.0/24, 203.56.40.0/24,
                 203.56.46.0/24, 203.56.50.0-203.56.55.255,
                 203.56.68.0/23, 203.56.82.0-203.56.85.255,
                 203.56.95.0/24, 203.56.110.0/24,
                 203.56.121.0/24, 203.56.161.0/24,
                 203.56.169.0/24, 203.56.172.0/23,
                 203.56.175.0/24, 203.56.183.0/24,
                 203.56.185.0/24, 203.56.187.0/24,
                 203.56.192.0/24, 203.56.198.0/24,
                 203.56.201.0/24, 203.56.208.0-203.56.210.255,
                 203.56.214.0/24, 203.56.216.0/24,
                 203.56.227.0-203.56.228.255, 203.56.232.0/24,
                 203.56.240.0/24, 203.56.252.0/24,
                 203.56.254.0/24, 203.57.5.0-203.57.6.255,
                 203.57.12.0/23, 203.57.28.0/24,
                 203.57.39.0/24, 203.57.46.0/24,
                 203.57.58.0/24, 203.57.61.0/24,
                 203.57.66.0/24, 203.57.69.0-203.57.71.255,
                 203.57.73.0/24, 203.57.90.0/24,
                 203.57.101.0/24, 203.57.109.0/24,
                 203.57.123.0/24, 203.57.157.0/24,
                 203.57.200.0/24, 203.57.202.0/24,
                 203.57.206.0/24, 203.57.222.0/24,
                 203.57.224.0/20, 203.57.246.0/23,
                 203.57.249.0/24, 203.57.253.0-203.57.255.255,
                 203.62.2.0/24, 203.62.131.0/24,
                 203.62.139.0/24, 203.62.161.0/24,
                 203.62.197.0/24, 203.62.228.0/22,
                 203.62.234.0/24, 203.62.246.0/24,
                 203.65.240.0/22, 203.76.160.0/22,
                 203.76.168.0/22, 203.76.208.0-203.76.219.255,
                 203.76.240.0/22, 203.77.180.0/22,
                 203.78.48.0/20, 203.78.156.0/22,
                 203.79.0.0/20, 203.80.4.0/23,
                 203.80.32.0/20, 203.80.57.0/24,
                 203.80.129.0/24, 203.80.132.0/22,
                 203.80.139.0-203.80.159.255, 203.81.0.0/21,
                 203.81.16.0/20, 203.81.244.0/22,
                 203.82.0.0/23, 203.82.16.0/21,
                 203.82.112.0/20, 203.82.224.0/20,
                 203.83.0.0/22, 203.83.12.0/22,
                 203.83.56.0/21, 203.83.224.0/20,
                 203.86.0.0-203.86.100.255, 203.86.103.0-203.86.127.255,
                 203.86.250.0/24, 203.86.254.0/23,
                 203.88.32.0/19, 203.88.192.0/19,
                 203.89.0.0/22, 203.89.136.0/22,
                 203.89.144.0/24, 203.90.0.0/22,
                 203.90.8.0/21, 203.90.128.0-203.90.223.255,
                 203.91.32.0/19, 203.91.96.0/20,
                 203.91.120.0/21, 203.92.0.0/22,
                 203.92.6.0/24, 203.92.160.0/19,
                 203.93.0.0-203.94.31.255, 203.95.0.0/21,
                 203.95.96.0-203.95.191.255, 203.95.200.0-203.95.211.255,
                 203.95.224.0/19, 203.99.8.0-203.99.31.255,
                 203.99.80.0/20, 203.100.32.0/20,
                 203.100.49.0-203.100.50.5, 203.100.50.7-203.100.51.255,
                 203.100.53.0/24, 203.100.55.0/24,
                 203.100.58.0/24, 203.100.60.0/24,
                 203.100.63.0/24, 203.100.80.0-203.100.127.255,
                 203.100.192.0/20, 203.104.32.0/20,
                 203.105.96.0-203.105.159.255, 203.107.0.0/17,
                 203.110.160.0/19, 203.110.208.0/20,
                 203.110.232.0-203.110.234.255, 203.114.80.0/20,
                 203.114.244.0/22, 203.118.192.0/19,
                 203.118.241.0/24, 203.118.248.0/22,
                 203.119.24.0-203.119.30.255, 203.119.32.0/24,
                 203.119.34.0/23, 203.119.80.0/22,
                 203.119.85.0/24, 203.119.113.0-203.119.255.255,
                 203.123.58.0/24, 203.128.32.0/19,
                 203.128.96.0-203.128.128.255, 203.128.224.0/21,
                 203.130.32.0-203.130.61.255, 203.130.63.0/24,
                 203.132.32.0/19, 203.134.240.0/21,
                 203.135.96.0/19, 203.135.160.0/20,
                 203.142.12.0/23, 203.142.219.0/24,
                 203.142.224.0/19, 203.144.96.0/19,
                 203.145.0.0/19, 203.148.0.0-203.148.83.255,
                 203.148.86.0/23, 203.149.92.0/22,
                 203.152.64.0/19, 203.152.128.0/19,
                 203.153.0.0/22, 203.156.192.0/18,
                 203.158.16.0/21, 203.160.129.0/24,
                 203.160.192.0/19, 203.161.0.0/22,
                 203.161.180.0/24, 203.161.183.0/24,
                 203.161.192.0/19, 203.166.160.0/19,
                 203.167.28.0/22, 203.168.0.0/19,
                 203.170.58.0/23, 203.171.0.0/22,
                 203.171.208.0/24, 203.171.224.0/20,
                 203.174.4.0/24, 203.174.6.0/23,
                 203.174.96.0/20, 203.175.128.0/19,
                 203.175.192.0-203.176.95.255, 203.176.168.0/21,
                 203.181.102.58, 203.184.80.0/20,
                 203.184.142.128/26, 203.187.160.0/19,
                 203.189.0.0/23, 203.189.6.0/23,
                 203.189.112.0/22, 203.189.192.0/19,
                 203.189.240.0/22, 203.190.96.0/20,
                 203.190.249.0/24, 203.191.0.0-203.191.2.255,
                 203.191.5.0/24, 203.191.7.0/24,
                 203.191.16.0/20, 203.191.64.0/18,
                 203.191.133.0/24, 203.191.144.0/20,
                 203.192.0.0/19, 203.193.224.0/19,
                 203.194.120.1-203.194.127.255, 203.195.64.0/19,
                 203.195.128.0-203.196.15.255, 203.196.28.0/22,
                 203.201.181.0-203.201.182.255, 203.202.236.0/22,
                 203.205.64.0/19, 203.205.160.0-203.205.168.255,
                 203.205.184.0/23, 203.205.212.0/23,
                 203.207.64.0-203.208.19.255, 203.208.32.0/19,
                 203.209.224.0/19, 203.212.0.0/20,
                 203.212.80.0/20, 203.215.234.0/24,
                 203.215.237.0-203.215.239.255, 203.217.164.0/22,
                 203.223.0.0-203.223.16.255, 203.223.22.0/23,
                 204.55.160.0/24, 204.74.96.0/24,
                 204.114.176.0/23, 207.68.174.8/29,
                 210.2.0.0-210.2.2.255, 210.2.4.0-210.2.15.255,
                 210.2.22.0-210.2.31.255, 210.5.0.0/19,
                 210.5.60.0/22, 210.5.128.0/19,
                 210.7.56.0/21, 210.12.0.0/15,
                 210.14.64.0/19, 210.14.112.0-210.15.191.255,
                 210.16.128.0-210.16.139.255, 210.16.156.0-210.16.191.255,
                 210.21.0.0-210.22.255.255, 210.23.32.0/19,
                 210.25.0.0-210.47.255.255, 210.51.0.0-210.52.108.255,
                 210.52.110.0-210.53.255.255, 210.56.192.0/19,
                 210.72.0.0-210.78.255.255, 210.79.64.0/18,
                 210.79.224.0/19, 210.82.0.0/15,
                 210.87.128.0/18, 210.166.2.0/24,
                 210.185.192.0/18, 210.192.96.0/19,
                 211.64.0.0/13, 211.80.0.0-211.100.175.255,
                 211.100.184.0-211.103.255.255, 211.136.0.0-211.152.127.255,
                 211.152.134.0/23, 211.152.140.0/22,
                 211.152.150.0/23, 211.152.157.0-211.155.68.255,
                 211.155.72.0-211.156.109.255, 211.156.112.0-211.167.255.255,
                 212.64.0.0/17, 212.129.128.0/17,
                 213.199.169.0/24, 213.255.231.0/24,
                 218.0.0.0-218.30.31.255, 218.30.54.0/23,
                 218.30.64.0-218.31.255.255, 218.56.0.0-218.98.63.255,
                 218.98.77.0-218.98.79.255, 218.98.96.0-218.99.255.255,
                 218.100.96.0-218.100.255.255, 218.104.0.0-218.109.255.255,
                 218.185.192.0/19, 218.192.0.0/12,
                 218.240.0.0-218.247.63.255, 218.247.96.0-218.247.255.255,
                 218.249.0.0/16, 219.72.0.0/16,
                 219.82.0.0/16, 219.83.128.0/17,
                 219.90.68.0-219.90.79.255, 219.128.0.0/11,
                 219.216.0.0-219.234.7.255, 219.234.8.1-219.239.255.255,
                 219.242.0.0-219.247.255.255, 220.101.192.0/18,
                 220.112.0.0/14, 220.152.128.0/17,
                 220.154.0.0/15, 220.158.240.0/22,
                 220.160.0.0-220.207.255.255, 220.231.0.0/18,
                 220.231.128.0/17, 220.232.64.0/18,
                 220.234.0.0/16, 220.242.0.0-220.242.4.255,
                 220.242.6.0-220.242.8.255, 220.242.11.0-220.242.23.255,
                 220.242.25.0-220.242.127.255, 220.242.129.0-220.242.138.255,
                 220.242.140.0/22, 220.242.145.0-220.242.147.255,
                 220.242.150.0-220.242.154.255, 220.242.157.0-220.242.159.255,
                 220.242.161.0/24, 220.242.163.0-220.242.165.255,
                 220.242.167.0-220.242.175.255, 220.242.177.0-220.243.199.255,
                 220.243.201.0/24, 220.243.204.0-220.243.206.255,
                 220.243.212.0-220.243.218.255, 220.243.220.0-220.243.227.255,
                 220.243.229.0-220.243.239.255, 220.243.241.0-220.243.250.255,
                 220.243.252.0/22, 220.247.136.0/21,
                 220.248.0.0-220.252.255.255, 221.0.0.0-221.12.191.255,
                 221.13.0.0-221.15.255.255, 221.122.0.0/15,
                 221.128.128.0-221.131.255.255, 221.133.224.0/19,
                 221.136.0.0/15, 221.172.0.0-221.183.255.255,
                 221.192.0.0-221.199.207.255, 221.199.224.0-221.239.255.255,
                 222.16.0.0-222.95.255.255, 222.125.0.0/16,
                 222.126.128.0-222.126.174.255, 222.126.176.0/29,
                 222.126.178.0-222.126.200.255, 222.126.206.0-222.126.255.255,
                 222.128.0.0/12, 222.160.0.0/14,
                 222.168.0.0-222.223.255.255, 222.240.0.0-222.249.255.255,
                 223.0.0.0/12, 223.20.0.0/15,
                 223.27.184.0/22, 223.29.208.0/22,
                 223.29.252.0/22, 223.64.0.0-223.117.255.255,
                 223.120.0.0-223.120.2.41, 223.120.2.43-223.120.2.80,
                 223.120.2.82-223.120.2.84, 223.120.2.86-223.120.2.117,
                 223.120.2.119-223.120.139.255, 223.120.141.0-223.129.255.255,
                 223.144.0.0-223.163.255.255, 223.166.0.0/15,
                 223.192.0.0/15, 223.198.0.0/15,
                 223.201.0.0-223.203.255.255, 223.208.0.0/13,
                 223.220.0.0/15, 223.223.176.0-223.223.207.255,
                 223.240.0.0-223.251.255.255, 223.252.128.0/19,
                 223.252.192.0/18, 223.254.0.0-223.255.127.255,
                 223.255.236.0/22, 223.255.252.0/23 }
    }

    set china_ip_route_pass {
        type ipv4_addr
        flags interval
        auto-merge
    }

    set localnetwork {
        type ipv4_addr
        flags interval
        auto-merge
        elements = { 0.0.0.0/8, 10.0.0.0/8,
                 100.64.0.0/10, 127.0.0.0/8,
                 169.254.0.0/16, 172.16.0.0/12,
                 192.168.0.0/16, 224.0.0.0/4,
                 240.0.0.0-255.255.255.255 }
    }

    set china_ip6_route {
        type ipv6_addr
        flags interval
        auto-merge
        elements = { 2001:250::-2001:256:ffff:ffff:ffff:ffff:ffff:ffff,
                 2001:7fa:5::/48,
                 2001:7fa:10::/48,
                 2001:c68::/32,
                 2001:cc0::/32,
                 2001:da8::-2001:daa:ffff:ffff:ffff:ffff:ffff:ffff,
                 2001:dc7::/32,
                 2001:dd8:1::/48,
                 2001:dd8:5::/48,
                 2001:dd8:1a::/48,
                 2001:dd9::/48,
                 2001:df0:27e::/48,
                 2001:df0:423::/48,
                 2001:df0:9c0::/48,
                 2001:df0:1bc0::/48,
                 2001:df0:25c0::/48,
                 2001:df0:26c0::/48,
                 2001:df0:2d80::/48,
                 2001:df0:2e00::/48,
                 2001:df0:2e80::/48,
                 2001:df0:59c0::/48,
                 2001:df0:85c0::/48,
                 2001:df0:8d40::/48,
                 2001:df0:9d40::/48,
                 2001:df0:ac40::/48,
                 2001:df0:b180::/48,
                 2001:df0:bf80::/48,
                 2001:df0:d880::/48,
                 2001:df0:f8c0::/48,
                 2001:df1:c80::/48,
                 2001:df1:2b40::/48,
                 2001:df1:4580::/48,
                 2001:df1:5280::/48,
                 2001:df1:5b80::/48,
                 2001:df1:5fc0::/48,
                 2001:df1:6180::/48,
                 2001:df1:61c0::/48,
                 2001:df1:6b80::/48,
                 2001:df1:a100::/48,
                 2001:df1:bd80::/48,
                 2001:df1:c900::/48,
                 2001:df1:d100::/48,
                 2001:df1:d180::/48,
                 2001:df1:da00::/48,
                 2001:df1:f480::/48,
                 2001:df1:f580::/48,
                 2001:df1:fd80::/48,
                 2001:df2:80::/48,
                 2001:df2:180::/48,
                 2001:df2:5780::/48,
                 2001:df2:8bc0::/48,
                 2001:df2:a580::/48,
                 2001:df2:c240::/48,
                 2001:df3:1480::/48,
                 2001:df3:2a80::/48,
                 2001:df3:3a80::/48,
                 2001:df3:a680::/48,
                 2001:df3:b380::/48,
                 2001:df3:c380::/48,
                 2001:df3:c680::/48,
                 2001:df3:d880::/48,
                 2001:df3:ed80::/48,
                 2001:df3:ef80::/48,
                 2001:df4:880::/48,
                 2001:df4:d80::/48,
                 2001:df4:1280::/48,
                 2001:df4:1500::/48,
                 2001:df4:1880::/48,
                 2001:df4:2780::/48,
                 2001:df4:2e80::/48,
                 2001:df4:3d80::/48,
                 2001:df4:4b80::/48,
                 2001:df4:4d80::/48,
                 2001:df4:a680::/48,
                 2001:df4:a980::/48,
                 2001:df4:c180::/48,
                 2001:df4:c580::/48,
                 2001:df4:c780::/48,
                 2001:df4:cf00::/48,
                 2001:df4:de80::/48,
                 2001:df5:2080::/48,
                 2001:df5:5f80::/48,
                 2001:df5:7800::/48,
                 2001:df6:100::/48,
                 2001:df6:3d00::/48,
                 2001:df6:5d00::/48,
                 2001:df6:6800::/48,
                 2001:df6:9e80::/48,
                 2001:df6:9f80::/48,
                 2001:df6:df00::/48,
                 2001:df6:f400::/48,
                 2001:df7:1480::/48,
                 2001:df7:2b80::/48,
                 2001:df7:6600::/48,
                 2001:df7:ab00::/48,
                 2001:df7:e580::/48,
                 2001:e08::/32,
                 2001:e18::/32,
                 2001:e80::/32,
                 2001:e88::/32,
                 2001:f38::/32,
                 2001:f88::/32,
                 2001:4438::/32,
                 2001:4510::/29,
                 2400:1040::/32,
                 2400:1160::/32,
                 2400:12c0::/32,
                 2400:1340::/32,
                 2400:1380::/32,
                 2400:15c0::/32,
                 2400:1640::/32,
                 2400:16c0::/32,
                 2400:1740::/32,
                 2400:17c0::/32,
                 2400:1840::/32,
                 2400:18c0::/32,
                 2400:1940::/32,
                 2400:19a0::/32,
                 2400:19c0::/32,
                 2400:1a40::/32,
                 2400:1ac0::/32,
                 2400:1b40::/32,
                 2400:1cc0::/32,
                 2400:1d40::/32,
                 2400:1dc0::/32,
                 2400:1e40::/32,
                 2400:1ec0::/32,
                 2400:1f40::/32,
                 2400:1fc0::/32,
                 2400:3040::/32,
                 2400:3140::/32,
                 2400:3160::/32,
                 2400:31c0::/32,
                 2400:3200::/32,
                 2400:3280::/32,
                 2400:32c0::/32,
                 2400:3340::/32,
                 2400:33c0::/32,
                 2400:3440::/32,
                 2400:34c0::/32,
                 2400:3540::/32,
                 2400:35c0::/32,
                 2400:3600::/32,
                 2400:3640::/32,
                 2400:3660::/32,
                 2400:36c0::/32,
                 2400:38c0::/32,
                 2400:39c0::/32,
                 2400:3a00::/32,
                 2400:3a40::/32,
                 2400:3b40::/32,
                 2400:3bc0::/32,
                 2400:3c40::/32,
                 2400:3cc0::/32,
                 2400:3e00::/32,
                 2400:3f40::/32,
                 2400:3f60::/32,
                 2400:3fc0::/32,
                 2400:4440::/32,
                 2400:44c0::/32,
                 2400:4540::/32,
                 2400:4600::/32,
                 2400:4640::/32,
                 2400:46c0::/32,
                 2400:4740::/32,
                 2400:4920::/32,
                 2400:4bc0::/32,
                 2400:4e00::/32,
                 2400:4e40::/32,
                 2400:5080::/32,
                 2400:5280::/32,
                 2400:5400::/32,
                 2400:5580::/32,
                 2400:55c0::/32,
                 2400:55e0::/32,
                 2400:5600::/32,
                 2400:5640::/32,
                 2400:56c0::/32,
                 2400:57c0::/32,
                 2400:5840::/32,
                 2400:5a00::/32,
                 2400:5a40::/32,
                 2400:5a60::/32,
                 2400:5ac0::/32,
                 2400:5b40::/32,
                 2400:5bc0::/32,
                 2400:5c40::/32,
                 2400:5c80::/32,
                 2400:5cc0::/32,
                 2400:5e20::/32,
                 2400:5e80::/32,
                 2400:5ee0::/32,
                 2400:5f60::/32,
                 2400:5fc0::/32,
                 2400:6000::/32,
                 2400:6040::/32,
                 2400:60c0::/32,
                 2400:61c0::/32,
                 2400:6200::/32,
                 2400:6600::/32,
                 2400:6640::/32,
                 2400:66a0::/32,
                 2400:66c0::/32,
                 2400:66e0::/32,
                 2400:6740::/32,
                 2400:67a0::/32,
                 2400:67c0::/32,
                 2400:6840::/32,
                 2400:68c0::/32,
                 2400:6940::/32,
                 2400:69c0::/32,
                 2400:6a00::/32,
                 2400:6a40::/32,
                 2400:6ac0::/32,
                 2400:6b40::/32,
                 2400:6bc0::/32,
                 2400:6c40::/32,
                 2400:6cc0::/32,
                 2400:6d40::/32,
                 2400:6da0::/32,
                 2400:6dc0::/32,
                 2400:6e00::/32,
                 2400:6e40::/32,
                 2400:6e60::/32,
                 2400:6ec0::/32,
                 2400:6f40::/32,
                 2400:6f80::/32,
                 2400:6fc0::/32,
                 2400:7040::/32,
                 2400:70a0::/32,
                 2400:7100::/32,
                 2400:7140::/32,
                 2400:71c0::/32,
                 2400:7200::/32,
                 2400:7240::/32,
                 2400:72c0::/32,
                 2400:72e0::/32,
                 2400:7340::/32,
                 2400:73c0::/32,
                 2400:73e0::/32,
                 2400:7440::/32,
                 2400:74c0::/32,
                 2400:7540::/32,
                 2400:75a0::/28,
                 2400:75c0::/32,
                 2400:7640::/32,
                 2400:7680::/32,
                 2400:76c0::/32,
                 2400:7740::/32,
                 2400:77c0::/32,
                 2400:79c0::/32,
                 2400:7ac0::/32,
                 2400:7ae0::/32,
                 2400:7bc0::/32,
                 2400:7f80::/32,
                 2400:7fc0::/32,
                 2400:8080::/32,
                 2400:8200::/32,
                 2400:82c0::/32,
                 2400:8580::/32,
                 2400:8600::/32,
                 2400:86a0::/32,
                 2400:86e0::/32,
                 2400:8780::/32,
                 2400:87c0::/32,
                 2400:8840::/32,
                 2400:8920::/32,
                 2400:8980::/32,
                 2400:89c0::/32,
                 2400:8be0::/32,
                 2400:8ce0::/32,
                 2400:8e00::/32,
                 2400:8e60::/32,
                 2400:8f00::/32,
                 2400:8f60::/32,
                 2400:8fc0::/32,
                 2400:9020::/32,
                 2400:9040::/32,
                 2400:9340::/32,
                 2400:93e0::/32,
                 2400:9520::/32,
                 2400:9580::/32,
                 2400:95c0::/32,
                 2400:95e0::/32,
                 2400:9600::/32,
                 2400:9620::/32,
                 2400:98c0::/32,
                 2400:9960::/32,
                 2400:99e0::/32,
                 2400:9a00::/32,
                 2400:9ca0::/32,
                 2400:9e00::/32,
                 2400:a040::/32,
                 2400:a320::/32,
                 2400:a380::/32,
                 2400:a420::/32,
                 2400:a480::/32,
                 2400:a5a0::/32,
                 2400:a6a0::/32,
                 2400:a6e0::/32,
                 2400:a780::/32,
                 2400:a860::/32,
                 2400:a8a0::/32,
                 2400:a8c0::/32,
                 2400:a900::/32,
                 2400:a980::/29,
                 2400:a9a0::/32,
                 2400:abc0::/32,
                 2400:ae00::/32,
                 2400:b200::/32,
                 2400:b2c0::/32,
                 2400:b500::/32,
                 2400:b600::/32,
                 2400:b620::/32,
                 2400:b6c0::/32,
                 2400:b700::/32,
                 2400:b9a0::/32,
                 2400:b9c0::/32,
                 2400:ba00::/32,
                 2400:ba40::/31,
                 2400:bac0::/32,
                 2400:be00::/32,
                 2400:bf00::/32,
                 2400:c200::/32,
                 2400:c380::/32,
                 2400:c840::/32,
                 2400:c8c0::/32,
                 2400:c940::/32,
                 2400:c9c0::/32,
                 2400:ca40::/32,
                 2400:cac0::/32,
                 2400:cb40::/32,
                 2400:cb80::/32,
                 2400:cbc0::/32,
                 2400:cc40::/32,
                 2400:cc80::/32,
                 2400:ccc0::/32,
                 2400:cd40::/32,
                 2400:cda0::/32,
                 2400:cdc0::/32,
                 2400:ce00::/32,
                 2400:ce40::/32,
                 2400:cf40::/32,
                 2400:cfc0::/32,
                 2400:d0a0::/32,
                 2400:d0c0::/32,
                 2400:d100::/32,
                 2400:d160::/32,
                 2400:d1c0::/32,
                 2400:d200::/32,
                 2400:d300::/32,
                 2400:d440::/32,
                 2400:d600::/32,
                 2400:d6a0::/32,
                 2400:d6c0::/32,
                 2400:d720::/32,
                 2400:d780::/32,
                 2400:d7a0::/32,
                 2400:da00::/32,
                 2400:da60::/32,
                 2400:dd00::/28,
                 2400:dd40::/32,
                 2400:dda0::/32,
                 2400:de00::/32,
                 2400:de20::/32,
                 2400:de80::/32,
                 2400:dee0::/32,
                 2400:e0c0::/32,
                 2400:e5c0::/32,
                 2400:e680::/32,
                 2400:e7e0::/32,
                 2400:e880::/32,
                 2400:ebc0::/32,
                 2400:ed60::/32,
                 2400:eda0::/32,
                 2400:edc0::/32,
                 2400:ee00::/32,
                 2400:eec0::/32,
                 2400:ef40::/32,
                 2400:f480::/32,
                 2400:f5c0::/32,
                 2400:f6e0::/32,
                 2400:f720::/32,
                 2400:f7c0::/32,
                 2400:f840::/32,
                 2400:f860::/32,
                 2400:f980::/32,
                 2400:fac0::/32,
                 2400:fb40::/32,
                 2400:fb60::/32,
                 2400:fbc0::/32,
                 2400:fc40::/32,
                 2400:fcc0::/32,
                 2400:fe00::/32,
                 2401:20::/32,
                 2401:60::/32,
                 2401:80::/32,
                 2401:140::/32,
                 2401:1c0::/32,
                 2401:540::/32,
                 2401:620::/32,
                 2401:7c0::/32,
                 2401:800::/32,
                 2401:9c0::/32,
                 2401:a00::/32,
                 2401:a40::/32,
                 2401:ac0::/32,
                 2401:b40::/32,
                 2401:ba0::/32,
                 2401:bc0::/32,
                 2401:c40::/32,
                 2401:cc0::/32,
                 2401:d40::/32,
                 2401:e00::/32,
                 2401:1000::/32,
                 2401:1160::/32,
                 2401:11a0::/32,
                 2401:11c0::/32,
                 2401:1200::/32,
                 2401:12c0::/32,
                 2401:1320::/32,
                 2401:13a0::/32,
                 2401:15c0::/32,
                 2401:18c0::/32,
                 2401:18e0::/28,
                 2401:1940::/32,
                 2401:19c0::/32,
                 2401:1a40::/32,
                 2401:1ac0::/32,
                 2401:1c60::/32,
                 2401:1ce0::/32,
                 2401:1d40::/32,
                 2401:1da0::/32,
                 2401:1dc0::/32,
                 2401:1de0::/32,
                 2401:1e00::/32,
                 2401:1ec0::/32,
                 2401:1f40::/32,
                 2401:2040::/32,
                 2401:2080::/32,
                 2401:23c0::/32,
                 2401:2600::/32,
                 2401:2780::/32,
                 2401:2980::/32,
                 2401:2a00::/32,
                 2401:2b40::/32,
                 2401:2e00::/32,
                 2401:3100::/32,
                 2401:3380::/32,
                 2401:33c0::/32,
                 2401:3440::/32,
                 2401:3480::/32,
                 2401:34c0::/32,
                 2401:3640::/32,
                 2401:3780::/32,
                 2401:3800::/32,
                 2401:3880::/32,
                 2401:3980::/32,
                 2401:3a00::/32,
                 2401:3a80::/32,
                 2401:3b80::/32,
                 2401:3c80::/32,
                 2401:3d80::/32,
                 2401:3e80::/32,
                 2401:3f80::/32,
                 2401:4080::/32,
                 2401:4180::/32,
                 2401:4280::/32,
                 2401:4380::/32,
                 2401:4480::/32,
                 2401:4580::/32,
                 2401:4680::/32,
                 2401:4780::/32,
                 2401:4880::/32,
                 2401:4a80::/32,
                 2401:4b00::/32,
                 2401:4f80::/32,
                 2401:5180::/32,
                 2401:5680::/32,
                 2401:59c0::/32,
                 2401:5b40::/32,
                 2401:5c80::/32,
                 2401:7180::/32,
                 2401:71c0::/32,
                 2401:7240::/32,
                 2401:7340::/32,
                 2401:7580::/32,
                 2401:7680::/32,
                 2401:7700::/32,
                 2401:7780::/32,
                 2401:7880::/32,
                 2401:7980::/32,
                 2401:7a00::/32,
                 2401:7a80::/32,
                 2401:7b80::/32,
                 2401:7bc0::/32,
                 2401:7c80::/32,
                 2401:7cc0::/32,
                 2401:7d40::/32,
                 2401:7d80::/32,
                 2401:7e00::/32,
                 2401:7f80::/32,
                 2401:8200::/32,
                 2401:82c0::/32,
                 2401:8380::/32,
                 2401:8540::/32,
                 2401:8600::/32,
                 2401:8680::/32,
                 2401:8840::/32,
                 2401:8d00::/32,
                 2401:8f40::/32,
                 2401:8fc0::/32,
                 2401:9340::/32,
                 2401:9600::/32,
                 2401:96c0::/32,
                 2401:9740::/32,
                 2401:98c0::/32,
                 2401:9a00::/32,
                 2401:9ac0::/32,
                 2401:9b40::/32,
                 2401:9bc0::/32,
                 2401:9dc0::/32,
                 2401:9e40::/32,
                 2401:9f80::/32,
                 2401:a140::/32,
                 2401:a180::/32,
                 2401:a340::/32,
                 2401:a3c0::/32,
                 2401:a4c0::/32,
                 2401:a540::/32,
                 2401:a5c0::/32,
                 2401:a640::/32,
                 2401:a940::/32,
                 2401:a980::/32,
                 2401:aa00::/32,
                 2401:aa40::/32,
                 2401:acc0::/32,
                 2401:ad40::/32,
                 2401:adc0::/32,
                 2401:b040::/32,
                 2401:b180::/32,
                 2401:b340::/32,
                 2401:b400::/32,
                 2401:b480::/32,
                 2401:b4c0::/32,
                 2401:b540::/32,
                 2401:b580::/32,
                 2401:b600::/32,
                 2401:b680::/32,
                 2401:b6c0::/32,
                 2401:b7c0::/32,
                 2401:b940::/32,
                 2401:ba00::/32,
                 2401:ba40::/32,
                 2401:bb80::/32,
                 2401:be00::/32,
                 2401:c200::/32,
                 2401:c540::/32,
                 2401:c600::/32,
                 2401:c640::/32,
                 2401:c6c0::/32,
                 2401:c840::/32,
                 2401:c8c0::/32,
                 2401:ca00::/32,
                 2401:cb80::/32,
                 2401:cc00::/32,
                 2401:ce00::/32,
                 2401:cf40::/32,
                 2401:cfc0::/32,
                 2401:d0c0::/32,
                 2401:d140::/32,
                 2401:d180::/32,
                 2401:d2c0::/32,
                 2401:d340::/32,
                 2401:d780::/32,
                 2401:da00::/32,
                 2401:de00::/32,
                 2401:e080::/32,
                 2401:e0c0::/32,
                 2401:e140::/32,
                 2401:e240::/32,
                 2401:e2c0::/32,
                 2401:e340::/32,
                 2401:e6c0::/32,
                 2401:e840::/32,
                 2401:e8c0::/32,
                 2401:e940::/32,
                 2401:e9c0::/32,
                 2401:ec00::/32,
                 2401:ec40::/32,
                 2401:f300::/32,
                 2401:f7c0::/32,
                 2401:fa80::/32,
                 2401:fb80::/32,
                 2401:fc80::/32,
                 2401:fe80::/32,
                 2401:ffc0::/32,
                 2402:440::/32,
                 2402:5c0::/32,
                 2402:840::/32,
                 2402:ac0::/32,
                 2402:e00::/32,
                 2402:fc0::/32,
                 2402:1000::/32,
                 2402:1440::/32,
                 2402:14c0::/32,
                 2402:1600::/32,
                 2402:1740::/32,
                 2402:19c0::/32,
                 2402:1ec0::/32,
                 2402:1f40::/32,
                 2402:1f80::/32,
                 2402:2000::/32,
                 2402:2280::/32,
                 2402:22c0::/32,
                 2402:2440::/32,
                 2402:24c0::/32,
                 2402:2540::/32,
                 2402:2640::/32,
                 2402:27c0::/32,
                 2402:2a00::/32,
                 2402:2b80::/32,
                 2402:2bc0::/32,
                 2402:2d00::/32,
                 2402:2d80::/32,
                 2402:2e80::/32,
                 2402:2f40::/32,
                 2402:3040::/32,
                 2402:3140::/32,
                 2402:3180::/32,
                 2402:31c0::/32,
                 2402:3240::/32,
                 2402:33c0::/32,
                 2402:39c0::/32,
                 2402:3a40::/32,
                 2402:3ac0::/32,
                 2402:3c00::/32,
                 2402:3e00::/32,
                 2402:3ec0::/32,
                 2402:3f80::/32,
                 2402:4140::/32,
                 2402:42c0::/32,
                 2402:4340::/32,
                 2402:43c0::/32,
                 2402:4440::/32,
                 2402:4500::/32,
                 2402:4540::/32,
                 2402:4a00::/32,
                 2402:4a40::/32,
                 2402:4a80::/32,
                 2402:4ac0::/32,
                 2402:4b80::/32,
                 2402:4bc0::/32,
                 2402:4c40::/32,
                 2402:4d80::/32,
                 2402:4e00::/32,
                 2402:4ec0::/32,
                 2402:4f80::/32,
                 2402:5140::/32,
                 2402:5180::/32,
                 2402:52c0::/32,
                 2402:5340::/32,
                 2402:5880::/32,
                 2402:5940::/32,
                 2402:59c0::/32,
                 2402:5a40::/32,
                 2402:5b40::/32,
                 2402:5bc0::/32,
                 2402:5d00::/32,
                 2402:5e00::/32,
                 2402:5e40::/32,
                 2402:5ec0::/32,
                 2402:5f40::/32,
                 2402:6280::/32,
                 2402:62c0::/32,
                 2402:64c0::/32,
                 2402:66c0::/32,
                 2402:6740::/32,
                 2402:67c0::/32,
                 2402:6a00::/32,
                 2402:6b40::/32,
                 2402:6bc0::/32,
                 2402:6e00::/32,
                 2402:6e80::/32,
                 2402:6ec0::/32,
                 2402:6f40::/32,
                 2402:6fc0::/32,
                 2402:7040::/32,
                 2402:7080::/32,
                 2402:70c0::/32,
                 2402:7140::/32,
                 2402:71c0::/32,
                 2402:7240::/32,
                 2402:72c0::/32,
                 2402:7540::/32,
                 2402:75c0::/32,
                 2402:7740::/32,
                 2402:7d00::/32,
                 2402:7d80::/32,
                 2402:8180::/32,
                 2402:8300::/32,
                 2402:8380::/32,
                 2402:85c0::/32,
                 2402:8800::/32,
                 2402:8840::/32,
                 2402:8900::/32,
                 2402:8940::/32,
                 2402:89c0::/32,
                 2402:8b40::/32,
                 2402:8bc0::/32,
                 2402:8cc0::/32,
                 2402:8d40::/32,
                 2402:8f40::/32,
                 2402:8f80::/32,
                 2402:9240::/32,
                 2402:92c0::/32,
                 2402:93c0::/32,
                 2402:9440::/32,
                 2402:9480::/32,
                 2402:94c0::/32,
                 2402:9580::/32,
                 2402:95c0::/32,
                 2402:9680::/32,
                 2402:96c0::/32,
                 2402:9840::/32,
                 2402:98c0::/32,
                 2402:9940::/32,
                 2402:9a80::/32,
                 2402:9b80::/32,
                 2402:9f80::/32,
                 2402:9fc0::/32,
                 2402:a080::/32,
                 2402:a180::/32,
                 2402:a200::/32,
                 2402:a240::/32,
                 2402:a280::/32,
                 2402:a380::/32,
                 2402:a3c0::/32,
                 2402:a640::/32,
                 2402:a680::/32,
                 2402:a6c0::/32,
                 2402:a840::/32,
                 2402:a880::/32,
                 2402:a9c0::/32,
                 2402:aa80::/32,
                 2402:ab80::/32,
                 2402:ae00::/32,
                 2402:ae40::/32,
                 2402:aec0::/32,
                 2402:af80::/32,
                 2402:afc0::/32,
                 2402:b080::/32,
                 2402:b200::/32,
                 2402:b440::/32,
                 2402:b6c0::/32,
                 2402:b880::/32,
                 2402:b8c0::/32,
                 2402:b940::/32,
                 2402:b980::/32,
                 2402:ba80::/32,
                 2402:bac0::/32,
                 2402:bbc0::/32,
                 2402:bf80::/32,
                 2402:c280::/32,
                 2402:c3c0::/32,
                 2402:c5c0::/32,
                 2402:c9c0::/32,
                 2402:cc40::/32,
                 2402:cf00::/32,
                 2402:cf40::/32,
                 2402:d040::/32,
                 2402:d140::/32,
                 2402:d2c0::/32,
                 2402:d300::/32,
                 2402:d340::/32,
                 2402:d380::/32,
                 2402:d5c0::/32,
                 2402:d6c0::/32,
                 2402:d740::/32,
                 2402:d780::/32,
                 2402:d880::/32,
                 2402:d980::/32,
                 2402:da40::/32,
                 2402:db40::/32,
                 2402:dcc0::/32,
                 2402:de40::/32,
                 2402:dec0::/32,
                 2402:df40::/32,
                 2402:dfc0::/32,
                 2402:e040::/32,
                 2402:e0c0::/32,
                 2402:e140::/32,
                 2402:e2c0::/32,
                 2402:e3c0::/32,
                 2402:e480::/32,
                 2402:e540::/32,
                 2402:e680::/32,
                 2402:e740::/32,
                 2402:e780::/32,
                 2402:e7c0::/32,
                 2402:e880::/32,
                 2402:e980::/32,
                 2402:eb80::/32,
                 2402:ec80::/32,
                 2402:ed80::/32,
                 2402:ef40::/32,
                 2402:ef80::/32,
                 2402:f000::/32,
                 2402:f140::/32,
                 2402:f3c0::/32,
                 2402:f480::/32,
                 2402:f540::/32,
                 2402:f580::/32,
                 2402:f740::/32,
                 2402:f780::/32,
                 2402:f8c0::/32,
                 2402:f980::/32,
                 2402:f9c0::/32,
                 2402:fac0::/32,
                 2402:fcc0::/32,
                 2402:ff40::/32,
                 2402:ffc0::/32,
                 2403:600::/32,
                 2403:700::/32,
                 2403:7c0::/32,
                 2403:800::/31,
                 2403:980::/32,
                 2403:a80::/32,
                 2403:b80::/32,
                 2403:c80::/32,
                 2403:d40::/32,
                 2403:d80::/32,
                 2403:e80::/32,
                 2403:f00::/32,
                 2403:f40::/32,
                 2403:f80::/32,
                 2403:fc0::/32,
                 2403:1180::/32,
                 2403:1340::/32,
                 2403:1440::/32,
                 2403:1580::/32,
                 2403:16c0::/32,
                 2403:17c0::/32,
                 2403:1980::/32,
                 2403:1a40::/32,
                 2403:1b80::/32,
                 2403:1c80::/32,
                 2403:1d80::/32,
                 2403:1dc0::/32,
                 2403:1e80::/32,
                 2403:1ec0::/32,
                 2403:1f80::/32,
                 2403:2040::/32,
                 2403:2080::/32,
                 2403:2180::/32,
                 2403:2240::/32,
                 2403:2280::/32,
                 2403:2380::/32,
                 2403:2440::/32,
                 2403:24c0::/32,
                 2403:2580::/32,
                 2403:25c0::/32,
                 2403:2680::/32,
                 2403:26c0::/32,
                 2403:2740::/32,
                 2403:2780::/32,
                 2403:28c0::/32,
                 2403:2940::/32,
                 2403:2a00::/32,
                 2403:2a40::/32,
                 2403:2ac0::/32,
                 2403:2b40::/32,
                 2403:2bc0::/32,
                 2403:2cc0::/32,
                 2403:2f40::/32,
                 2403:2fc0::/32,
                 2403:3040::/32,
                 2403:30c0::/32,
                 2403:3140::/32,
                 2403:3280::/32,
                 2403:32c0::/32,
                 2403:3380::/32,
                 2403:3480::/32,
                 2403:3580::/32,
                 2403:3640::/32,
                 2403:3680::/32,
                 2403:36c0::/32,
                 2403:3740::/32,
                 2403:3780::/32,
                 2403:37c0::/32,
                 2403:3840::/32,
                 2403:3880::/32,
                 2403:38c0::/32,
                 2403:3940::/32,
                 2403:3980::/32,
                 2403:39c0::/32,
                 2403:3a40::/32,
                 2403:3b40::/32,
                 2403:3b80::/32,
                 2403:3bc0::/32,
                 2403:3c40::/32,
                 2403:3c80::/32,
                 2403:3cc0::/32,
                 2403:3d40::/32,
                 2403:3d80::/32,
                 2403:3dc0::/32,
                 2403:3e80::/32,
                 2403:3ec0::/32,
                 2403:3f40::/32,
                 2403:3f80::/32,
                 2403:4080::/32,
                 2403:4180::/32,
                 2403:4240::/32,
                 2403:4280::/32,
                 2403:4300::/32,
                 2403:4380::/32,
                 2403:4580::/32,
                 2403:4680::/32,
                 2403:4780::/32,
                 2403:4840::/32,
                 2403:4880::/32,
                 2403:4980::/32,
                 2403:4a40::/32,
                 2403:4a80::/32,
                 2403:4b40::/32,
                 2403:4b80::/32,
                 2403:4c80::/32,
                 2403:4cc0::/32,
                 2403:4d80::/32,
                 2403:4ec0::/32,
                 2403:5040::/32,
                 2403:5080::/32,
                 2403:50c0::/32,
                 2403:5280::/32,
                 2403:5380::/32,
                 2403:54c0::/32,
                 2403:5540::/32,
                 2403:5580::/32,
                 2403:5640::/32,
                 2403:5780::/32,
                 2403:58c0::/32,
                 2403:5980::/32,
                 2403:5a80::/32,
                 2403:5b40::/32,
                 2403:5b80::/32,
                 2403:5c80::/32,
                 2403:5d80::/32,
                 2403:5e40::/32,
                 2403:5e80::/32,
                 2403:5ec0::/32,
                 2403:5f80::/32,
                 2403:5fc0::/32,
                 2403:6080::/32,
                 2403:6180::/32,
                 2403:6280::/32,
                 2403:62c0::/32,
                 2403:6380::/32,
                 2403:6580::/32,
                 2403:6680::/32,
                 2403:6740::/32,
                 2403:6780::/32,
                 2403:6880::/32,
                 2403:6980::/32,
                 2403:6a00::/32,
                 2403:6c80::/32,
                 2403:6d40::/32,
                 2403:6d80::/32,
                 2403:6e80::/32,
                 2403:6f40::/32,
                 2403:6fc0::/32,
                 2403:7040::/32,
                 2403:7080::/32,
                 2403:7180::/32,
                 2403:7280::/32,
                 2403:7380::/32,
                 2403:7480::/32,
                 2403:7540::/32,
                 2403:7580::/32,
                 2403:76c0::/32,
                 2403:7700::/32,
                 2403:7840::/32,
                 2403:78c0::/32,
                 2403:7a80::/32,
                 2403:7b00::/32,
                 2403:7d80::/32,
                 2403:7e80::/32,
                 2403:7f80::/32,
                 2403:8080::/32,
                 2403:8180::/32,
                 2403:8280::/32,
                 2403:8380::/32,
                 2403:83c0::/32,
                 2403:8480::/32,
                 2403:8580::/32,
                 2403:8880::/32,
                 2403:8900::/32,
                 2403:8980::/32,
                 2403:8a40::/32,
                 2403:8a80::/32,
                 2403:8b00::/32,
                 2403:8b80::/32,
                 2403:8c00::/32,
                 2403:8c80::/32,
                 2403:8d00::/32,
                 2403:8d80::/32,
                 2403:9080::/32,
                 2403:9180::/32,
                 2403:9280::/32,
                 2403:9380::/32,
                 2403:9480::/32,
                 2403:9580::/32,
                 2403:9680::/32,
                 2403:9780::/32,
                 2403:9880::/32,
                 2403:9a80::/32,
                 2403:9ac0::/32,
                 2403:9b00::/32,
                 2403:9b40::/32,
                 2403:9b80::/32,
                 2403:9c80::/32,
                 2403:9d00::/32,
                 2403:9d80::/32,
                 2403:9e40::/32,
                 2403:9e80::/32,
                 2403:9ec0::/32,
                 2403:9f80::/32,
                 2403:a100::/32,
                 2403:a140::/32,
                 2403:a200::/32,
                 2403:a300::/32,
                 2403:a480::/32,
                 2403:a580::/32,
                 2403:a680::/32,
                 2403:a6c0::/32,
                 2403:a780::/32,
                 2403:a880::/32,
                 2403:a940::/32,
                 2403:a980::/32,
                 2403:a9c0::/32,
                 2403:aa40::/32,
                 2403:aa80::/32,
                 2403:ab80::/32,
                 2403:ac00::/32,
                 2403:af80::/32,
                 2403:b080::/32,
                 2403:b180::/32,
                 2403:b280::/32,
                 2403:b380::/32,
                 2403:b400::/32,
                 2403:b480::/32,
                 2403:b580::/32,
                 2403:b680::/32,
                 2403:b780::/32,
                 2403:b880::/32,
                 2403:b980::/32,
                 2403:ba40::/32,
                 2403:c040::/32,
                 2403:c080::/32,
                 2403:c100::/32,
                 2403:c140::/32,
                 2403:c180::/32,
                 2403:c3c0::/32,
                 2403:c440::/32,
                 2403:c480::/32,
                 2403:c4c0::/32,
                 2403:c980::/32,
                 2403:cdc0::/32,
                 2403:cec0::/32,
                 2403:cf80::/32,
                 2403:d080::/32,
                 2403:d180::/32,
                 2403:d280::/32,
                 2403:d2c0::/32,
                 2403:d380::/32,
                 2403:d400::/32,
                 2403:d440::/32,
                 2403:d480::/32,
                 2403:d580::/32,
                 2403:d680::/32,
                 2403:d780::/32,
                 2403:d7c0::/32,
                 2403:d880::/32,
                 2403:d980::/32,
                 2403:d9c0::/32,
                 2403:da80::/32,
                 2403:dac0::/32,
                 2403:db00::/32,
                 2403:db80::/32,
                 2403:dc80::/32,
                 2403:dd80::/32,
                 2403:de80::/32,
                 2403:df80::/32,
                 2403:e080::/32,
                 2403:e180::/32,
                 2403:e280::/32,
                 2403:e300::/32,
                 2403:e480::/32,
                 2403:e500::/32,
                 2403:e580::/32,
                 2403:e640::/32,
                 2403:e680::/32,
                 2403:e700::/32,
                 2403:e780::/32,
                 2403:e7c0::/32,
                 2403:e880::/32,
                 2403:e980::/32,
                 2403:ea80::/32,
                 2403:eac0::/32,
                 2403:eb80::/32,
                 2403:ec80::/32,
                 2403:ed00::/32,
                 2403:ed40::/32,
                 2403:ed80::/32,
                 2403:ee80::/32,
                 2403:ef80::/32,
                 2403:f080::/32,
                 2403:f100::/32,
                 2403:f180::/32,
                 2403:f240::/32,
                 2403:f280::/32,
                 2403:f300::/32,
                 2403:f380::/32,
                 2403:f4c0::/32,
                 2403:f580::/32,
                 2403:f740::/32,
                 2403:f8c0::/32,
                 2403:f980::/32,
                 2403:fb00::/32,
                 2403:fb80::/32,
                 2403:fc40::/32,
                 2403:fe40::/32,
                 2403:fe80::/32,
                 2403:fec0::/32,
                 2403:ff80::/32,
                 2403:ffc0::/32,
                 2404:100::/32,
                 2404:158::/32,
                 2404:240::/32,
                 2404:280::/32,
                 2404:440::/32,
                 2404:480::/32,
                 2404:680::/32,
                 2404:a80::/32,
                 2404:b80::/32,
                 2404:bc0::/32,
                 2404:c40::/32,
                 2404:d80::/32,
                 2404:f00::/32,
                 2404:f80::/32,
                 2404:1080::/32,
                 2404:10c0::/32,
                 2404:1180::/32,
                 2404:14c0::/32,
                 2404:1880::/32,
                 2404:1c80::/32,
                 2404:1cc0::/32,
                 2404:1d80::/32,
                 2404:1e80::/32,
                 2404:1f40::/32,
                 2404:21c0::/32,
                 2404:30c0::/32,
                 2404:3140::/32,
                 2404:31c0::/32,
                 2404:3240::/32,
                 2404:32c0::/32,
                 2404:3300::/32,
                 2404:3340::/32,
                 2404:3480::/32,
                 2404:35c0::/32,
                 2404:3640::/32,
                 2404:36c0::/32,
                 2404:3700::/32,
                 2404:3740::/32,
                 2404:37c0::/32,
                 2404:3840::/32,
                 2404:3940::/32,
                 2404:3b00::/34,
                 2404:3bc0::/32,
                 2404:3c40::/32,
                 2404:3f40::/32,
                 2404:4080::/32,
                 2404:41c0::/32,
                 2404:4540::/32,
                 2404:4740::/32,
                 2404:4bc0::/32,
                 2404:4d00::/32,
                 2404:4dc0::/32,
                 2404:51c0::/32,
                 2404:5640::/32,
                 2404:5a80::/32,
                 2404:5b00::/32,
                 2404:5d00::/32,
                 2404:6000::/32,
                 2404:6100::/32,
                 2404:6380::/32,
                 2404:6500::/32,
                 2404:65c0::/32,
                 2404:6a40::/32,
                 2404:6f80::/32,
                 2404:7100::/32,
                 2404:7180::/32,
                 2404:71c0::/32,
                 2404:7240::/32,
                 2404:74c0::/32,
                 2404:7600::/32,
                 2404:7740::/32,
                 2404:7940::/32,
                 2404:7d00::/32,
                 2404:8040::/32,
                 2404:80c0::/32,
                 2404:8140::/32,
                 2404:81c0::/32,
                 2404:8480::/32,
                 2404:8580::/32,
                 2404:8700::/32,
                 2404:8880::/32,
                 2404:8a80::/32,
                 2404:8b00::/32,
                 2404:8dc0::/32,
                 2404:9340::/32,
                 2404:9b80::/32,
                 2404:9c80::/32,
                 2404:a000::/32,
                 2404:a080::/32,
                 2404:a0c0::/32,
                 2404:a180::/32,
                 2404:a240::/32,
                 2404:a740::/32,
                 2404:b100::/32,
                 2404:b340::/32,
                 2404:b3c0::/32,
                 2404:b440::/32,
                 2404:b4c0::/32,
                 2404:b900::/32,
                 2404:bbc0::/32,
                 2404:bc40::/32,
                 2404:c1c0::/32,
                 2404:c240::/32,
                 2404:c2c0::/32,
                 2404:c300::/32,
                 2404:c3c0::/32,
                 2404:c440::/32,
                 2404:c4c0::/32,
                 2404:c540::/32,
                 2404:c5c0::/32,
                 2404:c640::/32,
                 2404:c940::/32,
                 2404:c9c0::/32,
                 2404:cd00::/32,
                 2404:d040::/32,
                 2404:d080::/32,
                 2404:d140::/32,
                 2404:d280::/32,
                 2404:d3c0::/32,
                 2404:d640::/32,
                 2404:d6c0::/32,
                 2404:d7c0::/32,
                 2404:d840::/32,
                 2404:dd80::/32,
                 2404:df00::/32,
                 2404:e280::/32,
                 2404:e540::/32,
                 2404:e5c0::/32,
                 2404:e780::/32,
                 2404:e880::/32,
                 2404:e8c0::/32,
                 2404:eb80::/32,
                 2404:ec40::/32,
                 2404:ecc0::/32,
                 2404:edc0::/32,
                 2404:f040::/32,
                 2404:f4c0::/32,
                 2404:f7c0::/32,
                 2405:80::/32,
                 2405:480::/32,
                 2405:580::/32,
                 2405:680::/32,
                 2405:6c0::/32,
                 2405:780::/32,
                 2405:880::/32,
                 2405:940::/32,
                 2405:980::/32,
                 2405:9c0::/32,
                 2405:a80::/32,
                 2405:b80::/32,
                 2405:c80::/32,
                 2405:d80::/32,
                 2405:e80::/32,
                 2405:f80::/32,
                 2405:1080::/32,
                 2405:1180::/32,
                 2405:1280::/32,
                 2405:1380::/32,
                 2405:1480::/32,
                 2405:1580::/32,
                 2405:1680::/32,
                 2405:18c0::/32,
                 2405:1c80::/32,
                 2405:1d80::/32,
                 2405:1e80::/32,
                 2405:1f80::/32,
                 2405:1fc0::/32,
                 2405:2080::/32,
                 2405:2180::/32,
                 2405:2280::/32,
                 2405:2340::/32,
                 2405:2380::/32,
                 2405:2480::/32,
                 2405:24c0::/32,
                 2405:2580::/32,
                 2405:2680::/32,
                 2405:2780::/32,
                 2405:2880::/32,
                 2405:2980::/32,
                 2405:2a80::/32,
                 2405:2b80::/32,
                 2405:2bc0::/32,
                 2405:2c80::/32,
                 2405:2d80::/32,
                 2405:2e80::/32,
                 2405:2ec0::/32,
                 2405:2f40::/32,
                 2405:2f80::/32,
                 2405:3140::/32,
                 2405:31c0::/32,
                 2405:37c0::/32,
                 2405:3880::/32,
                 2405:3980::/32,
                 2405:39c0::/32,
                 2405:3a80::/32,
                 2405:3ac0::/32,
                 2405:3b00::/32,
                 2405:3b80::/32,
                 2405:3bc0::/32,
                 2405:3c40::/32,
                 2405:3c80::/32,
                 2405:3d80::/32,
                 2405:3e80::/32,
                 2405:3f40::/32,
                 2405:3f80::/32,
                 2405:4080::/32,
                 2405:4140::/32,
                 2405:4180::/32,
                 2405:41c0::/32,
                 2405:4280::/32,
                 2405:4380::/32,
                 2405:4480::/32,
                 2405:44c0::/32,
                 2405:4540::/32,
                 2405:4580::/32,
                 2405:4680::/32,
                 2405:4780::/32,
                 2405:4880::/32,
                 2405:4980::/32,
                 2405:4a80::/32,
                 2405:4b80::/32,
                 2405:4d40::/32,
                 2405:4e80::/32,
                 2405:4f80::/32,
                 2405:5080::/32,
                 2405:5180::/32,
                 2405:5240::/32,
                 2405:5280::/32,
                 2405:52c0::/32,
                 2405:5380::/32,
                 2405:5480::/32,
                 2405:5580::/32,
                 2405:5680::/32,
                 2405:5780::/32,
                 2405:57c0::/32,
                 2405:5880::/32,
                 2405:5980::/32,
                 2405:5a80::/32,
                 2405:5b80::/32,
                 2405:5c80::/32,
                 2405:5cc0::/32,
                 2405:5d40::/32,
                 2405:5d80::/32,
                 2405:5dc0::/32,
                 2405:5e80::/32,
                 2405:5f80::/32,
                 2405:6080::/32,
                 2405:6180::/32,
                 2405:6200::/32,
                 2405:66c0::/32,
                 2405:6880::/32,
                 2405:68c0::/32,
                 2405:6940::/32,
                 2405:69c0::/32,
                 2405:6a80::/32,
                 2405:6b80::/32,
                 2405:6c80::/32,
                 2405:6d80::/32,
                 2405:6e80::/32,
                 2405:6f00::/32,
                 2405:6f80::/32,
                 2405:7040::/32,
                 2405:7080::/32,
                 2405:7180::/32,
                 2405:7240::/32,
                 2405:7280::/32,
                 2405:7380::/32,
                 2405:7480::/32,
                 2405:7580::/32,
                 2405:7680::/32,
                 2405:7780::/32,
                 2405:7880::/32,
                 2405:78c0::/32,
                 2405:7980::/32,
                 2405:79c0::/32,
                 2405:7a80::/32,
                 2405:7b80::/32,
                 2405:7c80::/32,
                 2405:7d40::/32,
                 2405:7f40::/32,
                 2405:7fc0::/32,
                 2405:8280::/32,
                 2405:8480::/32,
                 2405:84c0::/32,
                 2405:8580::/32,
                 2405:8680::/32,
                 2405:8780::/32,
                 2405:8880::/32,
                 2405:8980::/32,
                 2405:8a40::/32,
                 2405:8a80::/32,
                 2405:8ac0::/32,
                 2405:8b80::/32,
                 2405:8c80::/32,
                 2405:8d80::/32,
                 2405:8e80::/32,
                 2405:8f80::/32,
                 2405:9080::/32,
                 2405:9180::/32,
                 2405:9280::/32,
                 2405:9300::/32,
                 2405:9340::/32,
                 2405:9380::/32,
                 2405:93c0::/32,
                 2405:9480::/32,
                 2405:94c0::/32,
                 2405:9580::/32,
                 2405:9680::/32,
                 2405:9700::/32,
                 2405:9780::/32,
                 2405:97c0::/32,
                 2405:9880::/32,
                 2405:9900::/32,
                 2405:9980::/32,
                 2405:99c0::/32,
                 2405:9a80::/32,
                 2405:9b00::/32,
                 2405:9b80::/32,
                 2405:9bc0::/32,
                 2405:9e00::/32,
                 2405:a240::/32,
                 2405:a3c0::/32,
                 2405:a500::/32,
                 2405:a680::/32,
                 2405:a900::/32,
                 2405:a980::/32,
                 2405:aa80::/32,
                 2405:ab00::/32,
                 2405:ad00::/32,
                 2405:af00::/32,
                 2405:b100::/32,
                 2405:b300::/32,
                 2405:b7c0::/32,
                 2405:b880::/32,
                 2405:b980::/32,
                 2405:bb00::/32,
                 2405:bd00::/32,
                 2405:bd80::/32,
                 2405:bdc0::/32,
                 2405:be80::/32,
                 2405:bf00::/32,
                 2405:c040::/32,
                 2405:c280::/32,
                 2405:c380::/32,
                 2405:c480::/32,
                 2405:c500::/32,
                 2405:c580::/32,
                 2405:c680::/32,
                 2405:c780::/32,
                 2405:c880::/32,
                 2405:c980::/32,
                 2405:ca80::/32,
                 2405:cb80::/32,
                 2405:cc80::/32,
                 2405:cd80::/32,
                 2405:ce80::/32,
                 2405:d280::/32,
                 2405:d4c0::/32,
                 2405:d700::/32,
                 2405:d740::/32,
                 2405:d900::/32,
                 2405:df40::/32,
                 2405:e000::/32,
                 2405:e040::/32,
                 2405:e1c0::/32,
                 2405:e600::/32,
                 2405:ed40::/32,
                 2405:ee80::/32,
                 2405:ef40::/30,
                 2405:f340::/32,
                 2405:f380::/32,
                 2405:f3c0::/32,
                 2405:f580::/32,
                 2405:f6c0::/32,
                 2405:f940::/32,
                 2405:fdc0::/32,
                 2405:fe80::/32,
                 2405:fec0::/32,
                 2405:ff80::/32,
                 2406:40::/32,
                 2406:80::/32,
                 2406:c0::/32,
                 2406:140::/32,
                 2406:280::/32,
                 2406:440::/32,
                 2406:4c0::/32,
                 2406:7c0::/32,
                 2406:840::/32,
                 2406:880::/32,
                 2406:8c0::/32,
                 2406:d80::/32,
                 2406:e80::/32,
                 2406:f80::/32,
                 2406:1080::/32,
                 2406:1100::/32,
                 2406:1180::/32,
                 2406:1280::/32,
                 2406:1380::/32,
                 2406:1480::/32,
                 2406:1580::/32,
                 2406:15c0::/32,
                 2406:1680::/32,
                 2406:1780::/32,
                 2406:1880::/32,
                 2406:1980::/32,
                 2406:1a80::/32,
                 2406:1b80::/32,
                 2406:1c80::/32,
                 2406:1d80::/32,
                 2406:1e40::/32,
                 2406:1e80::/32,
                 2406:1f80::/32,
                 2406:2080::/32,
                 2406:2640::/32,
                 2406:2700::/32,
                 2406:2780::/32,
                 2406:2880::/32,
                 2406:2980::/32,
                 2406:2a80::/32,
                 2406:2b80::/32,
                 2406:2c40::/32,
                 2406:2c80::/32,
                 2406:2d80::/32,
                 2406:2e80::/32,
                 2406:2f80::/32,
                 2406:3080::/32,
                 2406:3180::/32,
                 2406:31c0::/32,
                 2406:3280::/32,
                 2406:3300::/32,
                 2406:3340::/32,
                 2406:3380::/32,
                 2406:3440::/32,
                 2406:3480::/32,
                 2406:34c0::/32,
                 2406:3580::/32,
                 2406:3640::/32,
                 2406:3680::/32,
                 2406:3700::/32,
                 2406:3780::/32,
                 2406:3880::/32,
                 2406:3980::/32,
                 2406:39c0::/32,
                 2406:3ac0::/32,
                 2406:3d80::/32,
                 2406:3e80::/32,
                 2406:3f80::/32,
                 2406:4080::/32,
                 2406:40c0::/32,
                 2406:4180::/32,
                 2406:4280::/32,
                 2406:42c0::/32,
                 2406:4340::/32,
                 2406:4380::/32,
                 2406:43c0::/32,
                 2406:4480::/32,
                 2406:4500::/32,
                 2406:4680::/32,
                 2406:4b80::/32,
                 2406:4c80::/32,
                 2406:4d00::/32,
                 2406:4d80::/32,
                 2406:4e80::/32,
                 2406:4f00::/32,
                 2406:4f80::/32,
                 2406:5080::/32,
                 2406:50c0::/32,
                 2406:5180::/32,
                 2406:5280::/32,
                 2406:52c0::/32,
                 2406:5340::/32,
                 2406:5380::/32,
                 2406:5480::/32,
                 2406:5580::/32,
                 2406:5680::/32,
                 2406:5780::/32,
                 2406:5840::/32,
                 2406:5880::/32,
                 2406:5940::/32,
                 2406:5980::/32,
                 2406:5a40::/32,
                 2406:5ac0::/32,
                 2406:5b40::/32,
                 2406:5d80::/32,
                 2406:5e80::/32,
                 2406:5f80::/32,
                 2406:6080::/32,
                 2406:6100::/32,
                 2406:6180::/32,
                 2406:61c0::/29,
                 2406:6280::/32,
                 2406:6300::/32,
                 2406:6340::/32,
                 2406:6380::/32,
                 2406:6480::/32,
                 2406:6500::/32,
                 2406:6580::/32,
                 2406:65c0::/32,
                 2406:6640::/32,
                 2406:6680::/32,
                 2406:6780::/32,
                 2406:6880::/32,
                 2406:6980::/32,
                 2406:6a80::/32,
                 2406:6b80::/32,
                 2406:6bc0::/32,
                 2406:6c80::/32,
                 2406:6d80::/32,
                 2406:6e80::/32,
                 2406:6f80::/32,
                 2406:7080::/32,
                 2406:7280::/32,
                 2406:7380::/32,
                 2406:7480::/32,
                 2406:7580::/32,
                 2406:7680::/32,
                 2406:7780::/32,
                 2406:7880::/32,
                 2406:7980::/32,
                 2406:7a80::/32,
                 2406:7b80::/32,
                 2406:7c80::/32,
                 2406:7d00::/32,
                 2406:7d80::/32,
                 2406:7e80::/32,
                 2406:7f80::/32,
                 2406:7fc0::/32,
                 2406:8080::/32,
                 2406:8180::/32,
                 2406:8280::/32,
                 2406:8380::/32,
                 2406:8480::/32,
                 2406:8500::/32,
                 2406:8580::/32,
                 2406:8780::/32,
                 2406:8880::/32,
                 2406:8980::/32,
                 2406:8a80::/32,
                 2406:8b80::/32,
                 2406:8c80::/32,
                 2406:8d80::/32,
                 2406:8e80::/32,
                 2406:8f40::/32,
                 2406:8f80::/32,
                 2406:9180::/32,
                 2406:9200::/32,
                 2406:9280::/32,
                 2406:9380::/32,
                 2406:9480::/32,
                 2406:94c0::/32,
                 2406:9780::/32,
                 2406:9d80::/32,
                 2406:9e40::/32,
                 2406:9e80::/32,
                 2406:9f80::/32,
                 2406:a080::/32,
                 2406:a180::/32,
                 2406:a280::/32,
                 2406:a380::/32,
                 2406:a480::/32,
                 2406:a580::/32,
                 2406:a680::/32,
                 2406:a780::/32,
                 2406:a7c0::/32,
                 2406:a880::/32,
                 2406:a8c0::/32,
                 2406:a980::/32,
                 2406:aa80::/32,
                 2406:aac0::/32,
                 2406:ab80::/32,
                 2406:ac80::/32,
                 2406:acc0::/32,
                 2406:ad40::/32,
                 2406:ad80::/32,
                 2406:ae80::/32,
                 2406:af80::/32,
                 2406:b080::/32,
                 2406:b640::/32,
                 2406:b880::/32,
                 2406:b980::/32,
                 2406:ba80::/32,
                 2406:bb80::/32,
                 2406:bc80::/32,
                 2406:bd40::/32,
                 2406:bd80::/32,
                 2406:bdc0::/32,
                 2406:be80::/32,
                 2406:bf80::/32,
                 2406:c080::/32,
                 2406:c180::/32,
                 2406:c280::/32,
                 2406:c340::/32,
                 2406:c480::/32,
                 2406:c580::/32,
                 2406:c680::/32,
                 2406:c780::/32,
                 2406:c880::/32,
                 2406:c900::/32,
                 2406:c980::/32,
                 2406:ca80::/32,
                 2406:cac0::/32,
                 2406:cb80::/32,
                 2406:cc80::/32,
                 2406:cd80::/32,
                 2406:ce80::/32,
                 2406:cf00::/30,
                 2406:cf80::/32,
                 2406:d080::/32,
                 2406:d140::/32,
                 2406:d180::/32,
                 2406:d280::/32,
                 2406:d2c0::/32,
                 2406:d380::/32,
                 2406:d440::/32,
                 2406:d480::/32,
                 2406:d580::/32,
                 2406:d680::/32,
                 2406:d780::/32,
                 2406:d880::/32,
                 2406:d980::/32,
                 2406:db80::/32,
                 2406:dc80::/32,
                 2406:dd00::/32,
                 2406:dd80::/32,
                 2406:de80::/32,
                 2406:df80::/32,
                 2406:e080::/32,
                 2406:e180::/32,
                 2406:e2c0::/32,
                 2406:e380::/32,
                 2406:e3c0::/32,
                 2406:e500::/32,
                 2406:e580::/32,
                 2406:e680::/32,
                 2406:e780::/32,
                 2406:e8c0::/32,
                 2406:ea40::/28,
                 2406:f280::/32,
                 2406:f300::/32,
                 2406:f4c0::/32,
                 2406:f7c0::/32,
                 2406:f980::/32,
                 2406:fc80::/32,
                 2406:fd80::/32,
                 2406:fe80::/32,
                 2406:ff00::/32,
                 2407:480::/32,
                 2407:580::/32,
                 2407:cc0::/32,
                 2407:f40::/32,
                 2407:17c0::/32,
                 2407:1900::/32,
                 2407:1d00::/32,
                 2407:2280::/32,
                 2407:2380::/32,
                 2407:23c0::/32,
                 2407:2780::/32,
                 2407:2840::/32,
                 2407:2ac0::/32,
                 2407:31c0::/32,
                 2407:3340::/32,
                 2407:3540::/32,
                 2407:3700::/32,
                 2407:3740::/32,
                 2407:37c0::/32,
                 2407:3900::/32,
                 2407:3f40::/32,
                 2407:43c0::/32,
                 2407:4440::/32,
                 2407:4580::/32,
                 2407:4680::/32,
                 2407:4740::/32,
                 2407:4880::/32,
                 2407:4980::/32,
                 2407:4a80::/32,
                 2407:4c80::/32,
                 2407:4d80::/32,
                 2407:4e80::/32,
                 2407:4f00::/32,
                 2407:5380::/32,
                 2407:53c0::/32,
                 2407:5500::/32,
                 2407:5780::/32,
                 2407:5840::/32,
                 2407:6040::/32,
                 2407:6580::/32,
                 2407:6c40::/32,
                 2407:7680::/32,
                 2407:7780::/32,
                 2407:7880::/32,
                 2407:7980::/32,
                 2407:7c80::/32,
                 2407:7d00::/32,
                 2407:7d80::/32,
                 2407:7e80::/32,
                 2407:8880::/32,
                 2407:8b80::/32,
                 2407:8f40::/32,
                 2407:9080::/32,
                 2407:9180::/32,
                 2407:94c0::/32,
                 2407:9680::/32,
                 2407:9980::/32,
                 2407:9b40::/32,
                 2407:9bc0::/32,
                 2407:9f00::/32,
                 2407:9f80::/32,
                 2407:a040::/32,
                 2407:a640::/32,
                 2407:a7c0::/32,
                 2407:a880::/32,
                 2407:a940::/32,
                 2407:ad80::/32,
                 2407:ae80::/32,
                 2407:af80::/32,
                 2407:b080::/32,
                 2407:b180::/32,
                 2407:b280::/32,
                 2407:b380::/32,
                 2407:b580::/32,
                 2407:b680::/32,
                 2407:b780::/32,
                 2407:b880::/32,
                 2407:b980::/32,
                 2407:ba00::/32,
                 2407:ba80::/32,
                 2407:bb80::/32,
                 2407:bc00::/32,
                 2407:bc80::/32,
                 2407:bd80::/32,
                 2407:bdc0::/32,
                 2407:be80::/32,
                 2407:bf80::/32,
                 2407:c080::/32,
                 2407:c380::/32,
                 2407:c400::/32,
                 2407:c480::/32,
                 2407:c580::/32,
                 2407:c680::/32,
                 2407:c780::/32,
                 2407:c880::/32,
                 2407:c900::/32,
                 2407:c980::/32,
                 2407:cb80::/32,
                 2407:cc80::/32,
                 2407:cd80::/32,
                 2407:ce80::/32,
                 2407:cf00::/32,
                 2407:cf80::/32,
                 2407:d480::/32,
                 2407:d580::/32,
                 2407:d680::/32,
                 2407:d780::/32,
                 2407:d7c0::/32,
                 2407:d880::/32,
                 2407:d8c0::/32,
                 2407:d980::/32,
                 2407:d9c0::/32,
                 2407:da80::/32,
                 2407:db80::/32,
                 2407:dc80::/32,
                 2407:dd80::/32,
                 2407:de80::/32,
                 2407:df80::/32,
                 2407:dfc0::/32,
                 2407:e080::/32,
                 2407:e180::/32,
                 2407:e280::/32,
                 2407:e380::/32,
                 2407:e480::/32,
                 2407:e580::/32,
                 2407:e680::/32,
                 2407:e780::/32,
                 2407:e800::/32,
                 2407:ea80::/32,
                 2407:eb80::/32,
                 2407:ec40::/32,
                 2407:ec80::/32,
                 2407:ecc0::/32,
                 2407:ed80::/32,
                 2407:ee80::/32,
                 2407:ef80::/32,
                 2407:f080::/32,
                 2407:f180::/32,
                 2407:f280::/32,
                 2407:f380::/32,
                 2407:f480::/32,
                 2407:f580::/32,
                 2407:f680::/32,
                 2407:f780::/32,
                 2407:f880::/32,
                 2407:f980::/32,
                 2407:fa80::/32,
                 2407:fb80::/32,
                 2407:fc80::/32,
                 2407:fd80::/32,
                 2408:4000::/22,
                 2408:6000::/24,
                 2408:8000::/20,
                 2409:2000::/21,
                 2409:6000::/20,
                 2409:8000::/20,
                 240a:2000::/24,
                 240a:4000::/21,
                 240a:6000::/24,
                 240a:8000::/21,
                 240a:a000::/20,
                 240a:c000::/20,
                 240b:2000::/22,
                 240b:6000::/20,
                 240b:8000::/21,
                 240b:a000::/25,
                 240b:e000::/26,
                 240c::/28,
                 240c:4000::/22,
                 240c:8000::/21,
                 240c:c000::/20,
                 240d:4000::/21,
                 240d:8000::/24,
                 240e::/18,
                 240f:4000::/24,
                 240f:8000::/24,
                 240f:c000::/24 }
    }

    set china_ip6_route_pass {
        type ipv6_addr
        flags interval
        auto-merge
    }

    set localnetwork6 {
        type ipv6_addr
        flags interval
        auto-merge
        elements = { ::,
                 ::1,
                 ::ffff:0.0.0.0/96,
                 ::ffff:0:0:0/96,
                 64:ff9b::/96,
                 100::/64,
                 2001::/32,
                 2001:20::/28,
                 2001:db8::/32,
                 2002::/16,
                 <IPv6-Prefix1>/64,
                 <IPv6-Prefix2>/64,
                 fc00::/7,
                 fe80::/10,
                 ff00::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff }
    }

    chain input {
        type filter hook input priority filter; policy accept;
        udp dport 443 ip6 daddr != @china_ip6_route counter packets 0 bytes 0 reject with icmpv6 port-unreachable comment "OpenClash QUIC REJECT"
        iifname "lo" accept comment "!fw4: Accept traffic from loopback"
        ct state established,related accept comment "!fw4: Allow inbound established and related flows"
        tcp flags syn / fin,syn,rst,ack jump syn_flood comment "!fw4: Rate limit TCP syn packets"
        iifname { "WG", "br-lan" } jump input_lan comment "!fw4: Handle lan IPv4/IPv6 input traffic"
        iifname "pppoe-wan" jump input_wan comment "!fw4: Handle wan IPv4/IPv6 input traffic"
        iifname "docker0" jump input_docker comment "!fw4: Handle docker IPv4/IPv6 input traffic"
    }

    chain forward {
        type filter hook forward priority filter; policy accept;
        oifname "utun" udp dport 443 ip daddr != @china_ip_route counter packets 10 bytes 12530 reject with icmp port-unreachable comment "OpenClash QUIC REJECT"
        meta l4proto { tcp, udp } oifname "utun" counter packets 84417 bytes 6102493 accept comment "OpenClash TUN Forward"
        ct state established,related accept comment "!fw4: Allow forwarded established and related flows"
        iifname { "WG", "br-lan" } jump forward_lan comment "!fw4: Handle lan IPv4/IPv6 forward traffic"
        iifname "pppoe-wan" jump forward_wan comment "!fw4: Handle wan IPv4/IPv6 forward traffic"
        iifname "docker0" jump forward_docker comment "!fw4: Handle docker IPv4/IPv6 forward traffic"
        jump upnp_forward comment "Hook into miniupnpd forwarding chain"
    }

    chain output {
        type filter hook output priority filter; policy accept;
        oifname "lo" accept comment "!fw4: Accept traffic towards loopback"
        ct state established,related accept comment "!fw4: Allow outbound established and related flows"
        oifname { "WG", "br-lan" } jump output_lan comment "!fw4: Handle lan IPv4/IPv6 output traffic"
        oifname "pppoe-wan" jump output_wan comment "!fw4: Handle wan IPv4/IPv6 output traffic"
        oifname "docker0" jump output_docker comment "!fw4: Handle docker IPv4/IPv6 output traffic"
    }

    chain prerouting {
        type filter hook prerouting priority filter; policy accept;
        iifname { "WG", "br-lan" } jump helper_lan comment "!fw4: Handle lan IPv4/IPv6 helper assignment"
        iifname "docker0" jump helper_docker comment "!fw4: Handle docker IPv4/IPv6 helper assignment"
    }

    chain handle_reject {
        meta l4proto tcp reject with tcp reset comment "!fw4: Reject TCP traffic"
        reject comment "!fw4: Reject any other traffic"
    }

    chain syn_flood {
        limit rate 25/second burst 50 packets return comment "!fw4: Accept SYN packets below rate-limit"
        drop comment "!fw4: Drop excess packets"
    }

    chain input_lan {
        jump accept_from_lan
    }

    chain output_lan {
        jump accept_to_lan
    }

    chain forward_lan {
        jump accept_to_wan comment "!fw4: Accept lan to wan forwarding"
        jump accept_to_lan
    }

    chain helper_lan {
        udp dport 10080 ct helper set "amanda" comment "!fw4: Amanda backup and archiving proto"
        tcp dport 21 ct helper set "ftp" comment "!fw4: FTP passive connection tracking"
        udp dport 1719 ct helper set "RAS" comment "!fw4: RAS proto tracking"
        tcp dport 1720 ct helper set "Q.931" comment "!fw4: Q.931 proto tracking"
        meta nfproto ipv4 tcp dport 6667 ct helper set "irc" comment "!fw4: IRC DCC connection tracking"
        meta nfproto ipv4 tcp dport 1723 ct helper set "pptp" comment "!fw4: PPTP VPN connection tracking"
        udp dport 5060 ct helper set "sip" comment "!fw4: SIP VoIP connection tracking"
        meta nfproto ipv4 udp dport 161 ct helper set "snmp" comment "!fw4: SNMP monitoring connection tracking"
        udp dport 69 ct helper set "tftp" comment "!fw4: TFTP connection tracking"
    }

    chain accept_from_lan {
        iifname { "WG", "br-lan" } counter packets 1885 bytes 628974 accept comment "!fw4: accept lan IPv4/IPv6 traffic"
    }

    chain accept_to_lan {
        oifname { "WG", "br-lan" } counter packets 805 bytes 362641 accept comment "!fw4: accept lan IPv4/IPv6 traffic"
    }

    chain input_wan {
        meta nfproto ipv4 udp dport 68 counter packets 0 bytes 0 accept comment "!fw4: Allow-DHCP-Renew"
        icmp type echo-request counter packets 0 bytes 0 accept comment "!fw4: Allow-Ping"
        meta nfproto ipv4 meta l4proto igmp counter packets 0 bytes 0 accept comment "!fw4: Allow-IGMP"
        ip6 saddr fc00::/6 ip6 daddr fc00::/6 udp dport 546 counter packets 0 bytes 0 accept comment "!fw4: Allow-DHCPv6"
        ip6 saddr fe80::/10 icmpv6 type . icmpv6 code { mld-listener-query . no-route, mld-listener-report . no-route, mld-listener-done . no-route, mld2-listener-report . no-route } counter packets 0 bytes 0 accept comment "!fw4: Allow-MLD"
        icmpv6 type { destination-unreachable, time-exceeded, echo-request, echo-reply, nd-router-solicit, nd-router-advert } limit rate 1000/second counter packets 0 bytes 0 accept comment "!fw4: Allow-ICMPv6-Input"
        icmpv6 type . icmpv6 code { packet-too-big . no-route, parameter-problem . no-route, nd-neighbor-solicit . no-route, nd-neighbor-advert . no-route, parameter-problem . admin-prohibited } limit rate 1000/second counter packets 0 bytes 0 accept comment "!fw4: Allow-ICMPv6-Input"
        udp dport 24853 counter packets 0 bytes 0 accept comment "!fw4: Allow-WireGuard"
        tcp dport 1376 counter packets 10 bytes 800 accept comment "!fw4: Allow-Transmission"
        udp dport 1376 counter packets 156 bytes 20734 accept comment "!fw4: Allow-Transmission"
        tcp dport 8000 counter packets 89 bytes 7120 accept comment "!fw4: tmp"
        udp dport 8000 counter packets 0 bytes 0 accept comment "!fw4: tmp"
        jump drop_from_wan
    }

    chain output_wan {
        jump accept_to_wan
    }

    chain forward_wan {
        icmpv6 type { destination-unreachable, time-exceeded, echo-request, echo-reply } limit rate 1000/second counter packets 0 bytes 0 accept comment "!fw4: Allow-ICMPv6-Forward"
        icmpv6 type . icmpv6 code { packet-too-big . no-route, parameter-problem . no-route, parameter-problem . admin-prohibited } limit rate 1000/second counter packets 0 bytes 0 accept comment "!fw4: Allow-ICMPv6-Forward"
        meta l4proto esp counter packets 0 bytes 0 jump accept_to_lan comment "!fw4: Allow-IPSec-ESP"
        udp dport 500 counter packets 0 bytes 0 jump accept_to_lan comment "!fw4: Allow-ISAKMP"
        jump accept_to_wan
    }

    chain accept_to_wan {
        oifname "pppoe-wan" counter packets 2245 bytes 189713 accept comment "!fw4: accept wan IPv4/IPv6 traffic"
    }

    chain drop_from_wan {
        iifname "pppoe-wan" counter packets 608 bytes 302683 drop comment "!fw4: drop wan IPv4/IPv6 traffic"
    }

    chain input_docker {
        jump accept_from_docker
    }

    chain output_docker {
        jump accept_to_docker
    }

    chain forward_docker {
        jump accept_to_docker
    }

    chain helper_docker {
        udp dport 10080 ct helper set "amanda" comment "!fw4: Amanda backup and archiving proto"
        tcp dport 21 ct helper set "ftp" comment "!fw4: FTP passive connection tracking"
        udp dport 1719 ct helper set "RAS" comment "!fw4: RAS proto tracking"
        tcp dport 1720 ct helper set "Q.931" comment "!fw4: Q.931 proto tracking"
        meta nfproto ipv4 tcp dport 6667 ct helper set "irc" comment "!fw4: IRC DCC connection tracking"
        meta nfproto ipv4 tcp dport 1723 ct helper set "pptp" comment "!fw4: PPTP VPN connection tracking"
        udp dport 5060 ct helper set "sip" comment "!fw4: SIP VoIP connection tracking"
        meta nfproto ipv4 udp dport 161 ct helper set "snmp" comment "!fw4: SNMP monitoring connection tracking"
        udp dport 69 ct helper set "tftp" comment "!fw4: TFTP connection tracking"
    }

    chain accept_from_docker {
        iifname "docker0" counter packets 0 bytes 0 accept comment "!fw4: accept docker IPv4/IPv6 traffic"
    }

    chain accept_to_docker {
        oifname "docker0" counter packets 0 bytes 0 accept comment "!fw4: accept docker IPv4/IPv6 traffic"
    }

    chain dstnat {
        type nat hook prerouting priority dstnat; policy accept;
        ip6 daddr { 2001:4860:4860::8844, 2001:4860:4860::8888 } tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash Google DNS Hijack"
        meta nfproto ipv4 tcp dport 53 counter packets 0 bytes 0 accept comment "OpenClash TCP DNS Hijack"
        udp dport 53 counter packets 342 bytes 25197 redirect to :53 comment "OpenClash DNS Hijack"
        tcp dport 53 counter packets 0 bytes 0 redirect to :53 comment "OpenClash DNS Hijack"
        jump upnp_prerouting comment "Hook into miniupnpd prerouting chain"
    }

    chain srcnat {
        type nat hook postrouting priority srcnat; policy accept;
        oifname "pppoe-wan" jump srcnat_wan comment "!fw4: Handle wan IPv4/IPv6 srcnat traffic"
        jump upnp_postrouting comment "Hook into miniupnpd postrouting chain"
    }

    chain srcnat_wan {
        meta nfproto ipv4 masquerade comment "!fw4: Masquerade IPv4 wan traffic"
    }

    chain raw_prerouting {
        type filter hook prerouting priority raw; policy accept;
    }

    chain raw_output {
        type filter hook output priority raw; policy accept;
    }

    chain mangle_prerouting {
        type filter hook prerouting priority mangle; policy accept;
        meta l4proto { tcp, udp } counter packets 1643418 bytes 2157413602 jump openclash_mangle
        meta nfproto ipv6 counter packets 5497 bytes 5436776 jump openclash_mangle_v6
    }

    chain mangle_postrouting {
        type filter hook postrouting priority mangle; policy accept;
    }

    chain mangle_input {
        type filter hook input priority mangle; policy accept;
    }

    chain mangle_output {
        type route hook output priority mangle; policy accept;
        meta l4proto { tcp, udp } counter packets 408049 bytes 935908703 jump openclash_mangle_output
    }

    chain mangle_forward {
        type filter hook forward priority mangle; policy accept;
        iifname "pppoe-wan" tcp flags syn tcp option maxseg size set rt mtu comment "!fw4: Zone wan IPv4/IPv6 ingress MTU fixing"
        oifname "pppoe-wan" tcp flags syn tcp option maxseg size set rt mtu comment "!fw4: Zone wan IPv4/IPv6 egress MTU fixing"
    }

    chain upnp_forward {
    }

    chain upnp_prerouting {
    }

    chain upnp_postrouting {
    }

    chain openclash_mangle_output {
        meta nfproto ipv4 udp sport 8000 counter packets 0 bytes 0 return
        meta nfproto ipv4 tcp sport 8000 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 1376 counter packets 67602 bytes 3530706 return
        meta nfproto ipv4 tcp sport 1376 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 24853 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 500 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 68 counter packets 0 bytes 0 return
        ip daddr @localnetwork counter packets 2539 bytes 836887 return
        meta l4proto { tcp, udp } th dport 0-65535 ip daddr 198.18.0.0/16 meta mark set 0x00000162 counter packets 66714 bytes 912367006
        tcp dport 0-65535 meta skuid != 65534 meta mark set 0x00000162 counter packets 11200 bytes 2054647
    }

    chain openclash_mangle {
        meta nfproto ipv4 udp sport 8000 counter packets 0 bytes 0 return
        meta nfproto ipv4 tcp sport 8000 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 1376 counter packets 0 bytes 0 return
        meta nfproto ipv4 tcp sport 1376 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 24853 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 500 counter packets 0 bytes 0 return
        meta nfproto ipv4 udp sport 68 counter packets 2 bytes 672 return
        meta l4proto { tcp, udp } iifname "utun" counter packets 725576 bytes 949489480 return
        ip daddr @localnetwork counter packets 794507 bytes 1147043095 return
        ip protocol udp counter packets 4573 bytes 755812 jump openclash_upnp
        meta l4proto { tcp, udp } th dport 0-65535 meta mark set 0x00000162 counter packets 123333 bytes 60880355
    }

    chain openclash_dns_hijack {
    }

    chain openclash_upnp {
    }

    chain openclash_mangle_v6 {
        meta nfproto ipv6 udp sport 8000 counter packets 0 bytes 0 return
        meta nfproto ipv6 tcp sport 8000 counter packets 89 bytes 7120 return
        meta nfproto ipv6 udp sport 1376 counter packets 0 bytes 0 return
        meta nfproto ipv6 tcp sport 1376 counter packets 15 bytes 1176 return
        meta nfproto ipv6 udp sport 24853 counter packets 23 bytes 4508 return
        meta nfproto ipv6 udp sport 500 counter packets 0 bytes 0 return
        ip6 saddr fc00::/6 udp sport 546 counter packets 0 bytes 0 return
        ip6 daddr @localnetwork6 counter packets 5267 bytes 5415784 return
        meta nfproto ipv6 udp dport 53 counter packets 0 bytes 0 return
        ip6 daddr @china_ip6_route ip6 daddr != @china_ip6_route_pass counter packets 10 bytes 752 return
        meta nfproto ipv6 tcp dport 0-65535 meta mark set 0x00000162 tproxy ip6 to :7895 counter packets 93 bytes 7436 accept comment "OpenClash TCP Tproxy"
        meta nfproto ipv6 udp dport 0-65535 meta mark set 0x00000162 tproxy ip6 to :7895 counter packets 0 bytes 0 accept comment "OpenClash UDP Tproxy"
    }

    chain openclash_mangle_output_v6 {
        meta nfproto ipv6 udp sport 8000 counter packets 0 bytes 0 return
        meta nfproto ipv6 tcp sport 8000 counter packets 0 bytes 0 return
        meta nfproto ipv6 udp sport 1376 counter packets 0 bytes 0 return
        meta nfproto ipv6 tcp sport 1376 counter packets 0 bytes 0 return
        meta nfproto ipv6 udp sport 24853 counter packets 0 bytes 0 return
        meta nfproto ipv6 udp sport 500 counter packets 0 bytes 0 return
        meta nfproto ipv6 udp sport 546 counter packets 0 bytes 0 return
        ip6 daddr @localnetwork6 counter packets 0 bytes 0 return
        meta skuid != 65534 ip6 daddr @china_ip6_route ip6 daddr != @china_ip6_route_pass counter packets 0 bytes 0 return
        meta nfproto ipv6 meta skuid != 65534 tcp dport 0-65535 meta mark set 0x00000162 tproxy ip6 to :7895 counter packets 0 bytes 0 accept comment "OpenClash TCP Tproxy"
    }
}

kfstorm commented 1 year ago

手动替换openclash_mangle_output最后一条规则，使其只对IPv4生效，测试是OK的。

nft delete rule inet fw4 openclash_mangle_output handle 144
nft 'add rule inet fw4 openclash_mangle_output meta nfproto ipv4 tcp dport 0-65535 meta skuid != 65534 meta mark set 0x00000162 counter'

手动替换mangle_output里指向openclash_mangle_output的规则，使其只对IPv4生效，测试也是OK的。

nft delete rule inet fw4 mangle_output handle 146
nft 'add rule inet fw4 mangle_output meta nfproto ipv4 meta l4proto { tcp, udp } counter jump openclash_mangle_output'

两种替换方式都是在原有规则的基础上增加meta nfproto ipv4过滤条件。

@vernesong 麻烦看一下是不是脚本逻辑有问题。

vernesong / OpenClash