# Generated by ip6tables-save v1.8.11 on Fri Aug 21 18:25:20 2026
*mangle
:PREROUTING ACCEPT [12397150:25263310650]
:INPUT ACCEPT [12376494:25261701815]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [8475284:4802060078]
:POSTROUTING ACCEPT [8440878:4799170017]
:TOS_OUTPUT - [0:0]
:bw_mangle_POSTROUTING - [0:0]
:connmark_mangle_INPUT - [0:0]
:connmark_mangle_OUTPUT - [0:0]
:dscp_OUTPUT - [0:0]
:idletimer_mangle_POSTROUTING - [0:0]
:nm_qmi_priority_chain - [0:0]
:oem_mangle_post - [0:0]
:qcom_NWMGR - [0:0]
:qcom_htimer_POSTROUTING - [0:0]
:qcom_qos_filter_POSTROUTING - [0:0]
:qcom_qos_reset_POSTROUTING - [0:0]
:routectrl_mangle_INPUT - [0:0]
:tetherctrl_mangle_FORWARD - [0:0]
:wakeupctrl_mangle_INPUT - [0:0]
-A INPUT -j connmark_mangle_INPUT
-A INPUT -j wakeupctrl_mangle_INPUT
-A INPUT -j routectrl_mangle_INPUT
-A FORWARD -j tetherctrl_mangle_FORWARD
-A OUTPUT -j qcom_NWMGR
-A OUTPUT -j connmark_mangle_OUTPUT
-A OUTPUT -j dscp_OUTPUT
-A OUTPUT -j TOS_OUTPUT
-A POSTROUTING -j qcom_htimer_POSTROUTING
-A POSTROUTING -j oem_mangle_post
-A POSTROUTING -j bw_mangle_POSTROUTING
-A POSTROUTING -j idletimer_mangle_POSTROUTING
-A POSTROUTING -j qcom_qos_reset_POSTROUTING
-A POSTROUTING -j qcom_qos_filter_POSTROUTING
-A POSTROUTING -j nm_qmi_priority_chain
-A bw_mangle_POSTROUTING -o ipsec+ -j RETURN
-A bw_mangle_POSTROUTING -m policy --dir out --pol ipsec -j RETURN
-A bw_mangle_POSTROUTING -j MARK --set-xmark 0x0/0x100000
-A bw_mangle_POSTROUTING -m bpf --object-pinned /sys/fs/bpf/netd_shared/prog_netd_skfilter_egress_xtbpf
-A connmark_mangle_INPUT -m connmark --mark 0x0/0xfffff -j CONNMARK --save-mark --nfmask 0xfffff --ctmask 0xfffff
-A connmark_mangle_OUTPUT -m connmark --mark 0x0/0xfffff -j CONNMARK --save-mark --nfmask 0xfffff --ctmask 0xfffff
-A dscp_OUTPUT -o wlan0 -m owner --uid-owner 10076 -j DSCP --set-dscp 0x2c
-A idletimer_mangle_POSTROUTING -o rmnet_data2 -j IDLETIMER --timeout 10 --label 337 --send_nl_msg
-A idletimer_mangle_POSTROUTING -o rmnet_data4 -j IDLETIMER --timeout 10 --label 338 --send_nl_msg
-A qcom_htimer_POSTROUTING -o rmnet_data2 -j IDLETIMER --timeout 5 --label TCM_rmnet_data2 --alarm
-A qcom_htimer_POSTROUTING -o rmnet_data4 -j IDLETIMER --timeout 5 --label TCM_rmnet_data4 --alarm
-A qcom_htimer_POSTROUTING -o rmnet_data2 -j IDLETIMER --timeout 16 --label DM_rmnet_data2
-A qcom_qos_reset_POSTROUTING -o rmnet_data+ -j MARK --set-xmark 0x0/0xffffffff
-A routectrl_mangle_INPUT -i rmnet_data0 -j MARK --set-xmark 0xf0001/0x7fefffff
-A routectrl_mangle_INPUT -i rmnet_data2 -j MARK --set-xmark 0x30151/0x7fefffff
-A routectrl_mangle_INPUT -i rmnet_data4 -j MARK --set-xmark 0xf0152/0x7fefffff
-A wakeupctrl_mangle_INPUT -i rmnet_data2 -m mark --mark 0x80000000/0x80000000 -m limit --limit 10/sec -j NFLOG --nflog-prefix "1450809675789:rmnet_data2" --nflog-group 3 --nflog-threshold 8
-A wakeupctrl_mangle_INPUT -i rmnet_data4 -m mark --mark 0x80000000/0x80000000 -m limit --limit 10/sec -j NFLOG --nflog-prefix "1455104643085:rmnet_data4" --nflog-group 3 --nflog-threshold 8
COMMIT
# Completed on Fri Aug 21 18:25:20 2026
# Generated by ip6tables-save v1.8.11 on Fri Aug 21 18:25:20 2026
*raw
:PREROUTING ACCEPT [12397150:25263310650]
:OUTPUT ACCEPT [8475284:4802060078]
:bw_raw_PREROUTING - [0:0]
:idletimer_raw_PREROUTING - [0:0]
:qcom_htimer_PREROUTING - [0:0]
:tetherctrl_raw_PREROUTING - [0:0]
-A PREROUTING -j qcom_htimer_PREROUTING
-A PREROUTING -j idletimer_raw_PREROUTING
-A PREROUTING -j bw_raw_PREROUTING
-A PREROUTING -j tetherctrl_raw_PREROUTING
-A bw_raw_PREROUTING -m mark --mark 0xdeadc1a7 -j DROP
-A bw_raw_PREROUTING -i ipsec+ -j RETURN
-A bw_raw_PREROUTING -m policy --dir in --pol ipsec -j RETURN
-A bw_raw_PREROUTING -m bpf --object-pinned /sys/fs/bpf/netd_shared/prog_netd_skfilter_ingress_xtbpf
-A idletimer_raw_PREROUTING -i rmnet_data2 -j IDLETIMER --timeout 10 --label 337 --send_nl_msg
-A idletimer_raw_PREROUTING -i rmnet_data4 -j IDLETIMER --timeout 10 --label 338 --send_nl_msg
-A qcom_htimer_PREROUTING -i rmnet_data2 -j IDLETIMER --timeout 5 --label TCM_rmnet_data2 --alarm
-A qcom_htimer_PREROUTING -i rmnet_data4 -j IDLETIMER --timeout 5 --label TCM_rmnet_data4 --alarm
-A qcom_htimer_PREROUTING -i rmnet_data2 -j IDLETIMER --timeout 16 --label DM_rmnet_data2
COMMIT
# Completed on Fri Aug 21 18:25:20 2026
# Generated by ip6tables-save v1.8.11 on Fri Aug 21 18:25:20 2026
*filter
:INPUT ACCEPT [12376494:25261701815]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [8430604:4798336056]
:blockuid_fwd - [0:0]
:blockuid_out - [0:0]
:bw_FORWARD - [0:0]
:bw_INPUT - [0:0]
:bw_OUTPUT - [0:0]
:bw_costly_rmnet_data2 - [0:0]
:bw_costly_shared - [0:0]
:bw_data_saver - [0:0]
:bw_global_alert - [0:0]
:bw_happy_box - [0:0]
:bw_penalty_box - [0:0]
:fw_FORWARD - [0:0]
:fw_INPUT - [0:0]
:fw_OUTPUT - [0:0]
:oem_fwd - [0:0]
:oem_in - [0:0]
:oem_out - [0:0]
:st_OUTPUT - [0:0]
:st_clear_caught - [0:0]
:st_clear_detect - [0:0]
:st_penalty_log - [0:0]
:st_penalty_reject - [0:0]
:tetherctrl_FORWARD - [0:0]
:tetherctrl_counters - [0:0]
-A INPUT -j oem_in
-A INPUT -j bw_INPUT
-A INPUT -j fw_INPUT
-A FORWARD -j oem_fwd
-A FORWARD -j blockuid_fwd
-A FORWARD -j fw_FORWARD
-A FORWARD -j bw_FORWARD
-A FORWARD -j tetherctrl_FORWARD
-A OUTPUT -j oem_out
-A OUTPUT -j blockuid_out
-A OUTPUT -j fw_OUTPUT
-A OUTPUT -j st_OUTPUT
-A OUTPUT -j bw_OUTPUT
-A bw_FORWARD -i rmnet_data2 -j bw_costly_rmnet_data2
-A bw_FORWARD -o rmnet_data2 -j bw_costly_rmnet_data2
-A bw_INPUT -j bw_global_alert
-A bw_INPUT -i rmnet_data2 -j bw_costly_rmnet_data2
-A bw_INPUT -p esp -j RETURN
-A bw_INPUT -m mark --mark 0x100000/0x100000 -j RETURN
-A bw_INPUT -j MARK --set-xmark 0x100000/0x100000
-A bw_OUTPUT -j bw_global_alert
-A bw_OUTPUT -o rmnet_data2 -j bw_costly_rmnet_data2
-A bw_costly_rmnet_data2 -j bw_penalty_box
-A bw_costly_rmnet_data2 -m quota2 ! --name rmnet_data2  --quota 9223372036854775807  -j REJECT --reject-with icmp6-port-unreachable
-A bw_costly_shared -j bw_penalty_box
-A bw_data_saver -j RETURN
-A bw_global_alert -m quota2 ! --name globalAlert  --quota 2097152 
-A bw_happy_box -m bpf --object-pinned /sys/fs/bpf/netd_shared/prog_netd_skfilter_allowlist_xtbpf -j RETURN
-A bw_happy_box -j bw_data_saver
-A bw_penalty_box -m bpf --object-pinned /sys/fs/bpf/netd_shared/prog_netd_skfilter_denylist_xtbpf -j REJECT --reject-with icmp6-port-unreachable
-A bw_penalty_box -j bw_happy_box
-A fw_OUTPUT -s ::1/128 ! -o lo -j DROP
-A st_clear_detect -m connmark --mark 0x2000000/0x2000000 -j REJECT --reject-with icmp6-port-unreachable
-A st_clear_detect -m connmark --mark 0x1000000/0x1000000 -j RETURN
-A st_clear_detect -p tcp -m u32 --u32 "0x34>>0x1a&0x3c@0x28&0xffff0000=0x16030000&&0x34>>0x1a&0x3c@0x2c&0xff0000=0x10000" -j CONNMARK --set-xmark 0x1000000/0x1000000
-A st_clear_detect -p udp -m u32 --u32 "0x30&0xffff0000=0x16fe0000&&0x3c&0xff0000=0x10000" -j CONNMARK --set-xmark 0x1000000/0x1000000
-A st_clear_detect -m connmark --mark 0x1000000/0x1000000 -j RETURN
-A st_clear_detect -p tcp -m state --state ESTABLISHED -m u32 --u32 "0x34>>0x1a&0x3c@0x28&0x0=0x0" -j st_clear_caught
-A st_clear_detect -p udp -j st_clear_caught
-A st_penalty_log -j CONNMARK --set-xmark 0x1000000/0x1000000
-A st_penalty_log -j NFLOG
-A st_penalty_reject -j CONNMARK --set-xmark 0x2000000/0x2000000
-A st_penalty_reject -j NFLOG
-A st_penalty_reject -j REJECT --reject-with icmp6-port-unreachable
COMMIT
# Completed on Fri Aug 21 18:25:20 2026