*filter
IF {DECIDE_BRIDGE_MODE_ANY_ENDPOINT}
:IN DROP [0:0]
ELSE
:IN ACCEPT [0:0]
FI
:OUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
IF {SERVICE_HIGH_AVAILABILITY}
:HEARTBEAT_IN - [0:0]
:HEARTBEAT_OUT - [0:0]
-A IN -j HEARTBEAT_IN
FOREACH HAIF in {HAIFS}
-A OUT -d {PEERIP({HAIF})} -o {PHYSNAME({HAIF})} -j mangle --mangle-ip-s {IP({HAIF})}
DONE
-A OUT -j HEARTBEAT_OUT
FI
IF {DECIDE_BRIDGE_MODE_ANY_ENDPOINT}
IF {SERVICE_HIGH_AVAILABILITY}
# accept the heartbeat service IPs
FOREACH HAIF in {HAIFS}
-A IN -d {IP({HAIF})} -i {PHYSNAME({HAIF})} -j ACCEPT
DONE
FI
# -p 1 shmainei Request operation (who-has?)
FOREACH VIF in {LAN}
-A IN -d {VLL_GATEWAY}/{VLL_MASK_1} -i {PHYSNAME({VIF})} -j ACCEPT
DONE
FOREACH VIF in {LAN|WAN|VLAN}
-A IN -d {IP({VIF})}/32 -i {PHYSNAME({VIF})} -j ACCEPT
DONE
#-A IN -i {PHYSNAME({VIF})} -j DROP
FOREACH VIF in {LAN}
FOREACH IPID in {VLL_IP_IDS}
-A OUT -s {IP({VIF})} -d {VLL_IP({IPID})} -o {PHYSNAME({VIF})} -j mangle --mangle-ip-s {VLL_GATEWAY}  
DONE
DONE
FI
