iptables \ -A FJ-vnet0 \ -p tcp \ --source 1.1.1.1 \ -m dscp \ --dscp 2 \ --sport 80 \ -m state \ --state NEW,ESTABLISHED \ -j RETURN iptables \ -A FP-vnet0 \ -p tcp \ --destination 1.1.1.1 \ -m dscp \ --dscp 2 \ --dport 80 \ -m state \ --state ESTABLISHED \ -j ACCEPT iptables \ -A HJ-vnet0 \ -p tcp \ --source 1.1.1.1 \ -m dscp \ --dscp 2 \ --sport 80 \ -m state \ --state NEW,ESTABLISHED \ -j RETURN iptables \ -A FJ-vnet0 \ -p tcp \ --source 2.2.2.2 \ -m dscp \ --dscp 2 \ --sport 90 \ -m state \ --state NEW,ESTABLISHED \ -j RETURN iptables \ -A FP-vnet0 \ -p tcp \ --destination 2.2.2.2 \ -m dscp \ --dscp 2 \ --dport 90 \ -m state \ --state ESTABLISHED \ -j ACCEPT iptables \ -A HJ-vnet0 \ -p tcp \ --source 2.2.2.2 \ -m dscp \ --dscp 2 \ --sport 90 \ -m state \ --state NEW,ESTABLISHED \ -j RETURN iptables \ -A FJ-vnet0 \ -p tcp \ --source 3.3.3.3 \ -m dscp \ --dscp 2 \ --sport 80 \ -m state \ --state NEW,ESTABLISHED \ -j RETURN iptables \ -A FP-vnet0 \ -p tcp \ --destination 3.3.3.3 \ -m dscp \ --dscp 2 \ --dport 80 \ -m state \ --state ESTABLISHED \ -j ACCEPT iptables \ -A HJ-vnet0 \ -p tcp \ --source 3.3.3.3 \ -m dscp \ --dscp 2 \ --sport 80 \ -m state \ --state NEW,ESTABLISHED \ -j RETURN