*filter
:ufw-user-input - [0:0]
:ufw-user-output - [0:0]
:ufw-user-forward - [0:0]
:ufw-before-logging-input - [0:0]
:ufw-before-logging-output - [0:0]
:ufw-before-logging-forward - [0:0]
:ufw-user-logging-input - [0:0]
:ufw-user-logging-output - [0:0]
:ufw-user-logging-forward - [0:0]
:ufw-after-logging-input - [0:0]
:ufw-after-logging-output - [0:0]
:ufw-after-logging-forward - [0:0]
:ufw-logging-deny - [0:0]
:ufw-logging-allow - [0:0]
:ufw-user-limit - [0:0]
:ufw-user-limit-accept - [0:0]
### RULES ###

### tuple ### allow any 22 0.0.0.0/0 any 10.0.0.0/8 in
-A ufw-user-input -p tcp --dport 22 -s 10.0.0.0/8 -j ACCEPT
-A ufw-user-input -p udp --dport 22 -s 10.0.0.0/8 -j ACCEPT

### tuple ### allow tcp 18050 0.0.0.0/0 any 10.0.0.0/8 in
-A ufw-user-input -p tcp --dport 18050 -s 10.0.0.0/8 -j ACCEPT

### tuple ### allow udp 18050 0.0.0.0/0 any 10.0.0.0/8 in
-A ufw-user-input -p udp --dport 18050 -s 10.0.0.0/8 -j ACCEPT

### tuple ### allow tcp 18051 0.0.0.0/0 any 10.66.77.88 in
-A ufw-user-input -p tcp --dport 18051 -s 10.66.77.88 -j ACCEPT

### tuple ### allow udp 18051 0.0.0.0/0 any 10.66.77.88 in
-A ufw-user-input -p udp --dport 18051 -s 10.66.77.88 -j ACCEPT

### tuple ### allow tcp 22 0.0.0.0/0 any 0.0.0.0/0 in
-A ufw-user-input -p tcp --dport 22 -j ACCEPT

### tuple ### allow tcp 80 0.0.0.0/0 any 0.0.0.0/0 in comment=7472616566696b20776562
-A ufw-user-input -p tcp --dport 80 -j ACCEPT

### tuple ### allow tcp 443 0.0.0.0/0 any 0.0.0.0/0 in comment=7472616566696b20776562736563757265
-A ufw-user-input -p tcp --dport 443 -j ACCEPT

### tuple ### allow tcp 6687 0.0.0.0/0 any 10.0.0.0/8 in comment=7472616566696b206170702066726f6d2076706e
-A ufw-user-input -p tcp --dport 6687 -s 10.0.0.0/8 -j ACCEPT

### tuple ### allow tcp 6688 0.0.0.0/0 any 10.0.0.0/8 in comment=7472616566696b206170702d7463702066726f6d2076706e
-A ufw-user-input -p tcp --dport 6688 -s 10.0.0.0/8 -j ACCEPT

### END RULES ###

### LOGGING ###
-A ufw-after-logging-input -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
-I ufw-logging-deny -m conntrack --ctstate INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
### END LOGGING ###

### RATE LIMITING ###
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
-A ufw-user-limit -j REJECT
-A ufw-user-limit-accept -j ACCEPT
### END RATE LIMITING ###
COMMIT
