1ebtables \
2--concurrent \
3-t nat \
4-A libvirt-P-vnet0 \
5-p 0x1234 \
6-j ACCEPT
7ebtables \
8--concurrent \
9-t nat \
10-A libvirt-J-vnet0 \
11-s 01:02:03:04:05:06/ff:ff:ff:ff:ff:ff \
12-d aa:bb:cc:dd:ee:ff/ff:ff:ff:ff:ff:ff \
13-p ipv4 \
14--ip-source 10.1.2.3/32 \
15--ip-destination 10.1.2.3/32 \
16--ip-protocol 17 \
17--ip-source-port 291:564 \
18--ip-destination-port 13398:17767 \
19--ip-tos 0x32 \
20-j ACCEPT
21ebtables \
22--concurrent \
23-t nat \
24-A libvirt-J-vnet0 \
25-s 01:02:03:04:05:06/ff:ff:ff:ff:ff:fe \
26-d aa:bb:cc:dd:ee:ff/ff:ff:ff:ff:ff:80 \
27-p ipv6 \
28--ip6-source ::10.1.2.3/22 \
29--ip6-destination ::10.1.2.3/113 \
30--ip6-protocol 6 \
31--ip6-source-port 273:400 \
32--ip6-destination-port 13107:65535 \
33-j ACCEPT
34ebtables \
35--concurrent \
36-t nat \
37-A libvirt-J-vnet0 \
38-s 01:02:03:04:05:06/ff:ff:ff:ff:ff:ff \
39-d aa:bb:cc:dd:ee:ff/ff:ff:ff:ff:ff:ff \
40-p 0x806 \
41--arp-htype 18 \
42--arp-opcode 1 \
43--arp-ptype 0x56 \
44--arp-mac-src 01:02:03:04:05:06 \
45--arp-mac-dst 0a:0b:0c:0d:0e:0f \
46-j ACCEPT
47iptables \
48-w \
49-A FJ-vnet0 \
50-p udp \
51-m mac \
52--mac-source 01:02:03:04:05:06 \
53--destination 10.1.2.3/32 \
54-m dscp \
55--dscp 34 \
56--sport 291:400 \
57--dport 564:1092 \
58-m state \
59--state NEW,ESTABLISHED \
60-j RETURN
61iptables \
62-w \
63-A FP-vnet0 \
64-p udp \
65--source 10.1.2.3/32 \
66-m dscp \
67--dscp 34 \
68--dport 291:400 \
69--sport 564:1092 \
70-m state \
71--state ESTABLISHED \
72-j ACCEPT
73iptables \
74-w \
75-A HJ-vnet0 \
76-p udp \
77-m mac \
78--mac-source 01:02:03:04:05:06 \
79--destination 10.1.2.3/32 \
80-m dscp \
81--dscp 34 \
82--sport 291:400 \
83--dport 564:1092 \
84-m state \
85--state NEW,ESTABLISHED \
86-j RETURN
87ip6tables \
88-w \
89-A FJ-vnet0 \
90-p tcp \
91--destination a:b:c::/128 \
92-m dscp \
93--dscp 57 \
94--dport 32:33 \
95--sport 256:4369 \
96-m state \
97--state ESTABLISHED \
98-j RETURN
99ip6tables \
100-w \
101-A FP-vnet0 \
102-p tcp \
103-m mac \
104--mac-source 01:02:03:04:05:06 \
105--source a:b:c::/128 \
106-m dscp \
107--dscp 57 \
108--sport 32:33 \
109--dport 256:4369 \
110-m state \
111--state NEW,ESTABLISHED \
112-j ACCEPT
113ip6tables \
114-w \
115-A HJ-vnet0 \
116-p tcp \
117--destination a:b:c::/128 \
118-m dscp \
119--dscp 57 \
120--dport 32:33 \
121--sport 256:4369 \
122-m state \
123--state ESTABLISHED \
124-j RETURN
125