iptables -A FJ-vnet0 -p tcp --source 1.1.1.1 -m dscp --dscp 2 --sport 80 \
-m state --state NEW,ESTABLISHED -j RETURN
iptables -A FP-vnet0 -p tcp --destination 1.1.1.1 -m dscp --dscp 2 --dport 80 \
-m state --state ESTABLISHED -j ACCEPT
iptables -A HJ-vnet0 -p tcp --source 1.1.1.1 -m dscp --dscp 2 --sport 80 \
-m state --state NEW,ESTABLISHED -j RETURN
iptables -A FJ-vnet0 -p tcp --source 2.2.2.2 -m dscp --dscp 2 --sport 90 \
-m state --state NEW,ESTABLISHED -j RETURN
iptables -A FP-vnet0 -p tcp --destination 2.2.2.2 -m dscp --dscp 2 --dport 90 \
-m state --state ESTABLISHED -j ACCEPT
iptables -A HJ-vnet0 -p tcp --source 2.2.2.2 -m dscp --dscp 2 --sport 90 \
-m state --state NEW,ESTABLISHED -j RETURN
iptables -A FJ-vnet0 -p tcp --source 3.3.3.3 -m dscp --dscp 2 --sport 80 \
-m state --state NEW,ESTABLISHED -j RETURN
iptables -A FP-vnet0 -p tcp --destination 3.3.3.3 -m dscp --dscp 2 --dport 80 \
-m state --state ESTABLISHED -j ACCEPT
iptables -A HJ-vnet0 -p tcp --source 3.3.3.3 -m dscp --dscp 2 --sport 80 \
-m state --state NEW,ESTABLISHED -j RETURN