- C(ANY, FILTER, ACCEPT, "zone_%s_dest_ACCEPT"),
- C(ANY, FILTER, REJECT, "zone_%s_dest_REJECT"),
- C(ANY, FILTER, DROP, "zone_%s_dest_DROP"),
+ C(ANY, FILTER, ACCEPT, "zone_%1$s_dest_ACCEPT"),
+ C(ANY, FILTER, REJECT, "zone_%1$s_dest_REJECT"),
+ C(ANY, FILTER, DROP, "zone_%1$s_dest_DROP"),
+
+ C(V4, NAT, SNAT, "zone_%1$s_postrouting"),
+ C(V4, NAT, DNAT, "zone_%1$s_prerouting"),
+
+ C(ANY, FILTER, CUSTOM_CNS_V4, "input_%1$s_rule"),
+ C(ANY, FILTER, CUSTOM_CNS_V4, "output_%1$s_rule"),
+ C(ANY, FILTER, CUSTOM_CNS_V4, "forwarding_%1$s_rule"),
+ C(ANY, FILTER, CUSTOM_CNS_V6, "input_%1$s_rule"),
+ C(ANY, FILTER, CUSTOM_CNS_V6, "output_%1$s_rule"),
+ C(ANY, FILTER, CUSTOM_CNS_V6, "forwarding_%1$s_rule"),
+
+ C(V4, NAT, CUSTOM_CNS_V4, "prerouting_%1$s_rule"),
+ C(V4, NAT, CUSTOM_CNS_V4, "postrouting_%1$s_rule"),
+};
+
+
+#define R(dir1, dir2) \
+ "zone_%1$s_" #dir1 " -m comment --comment \"user chain for %1$s " \
+ #dir2 "\" -j " #dir2 "_%1$s_rule"