-A POSTROUTING -o eth1 -m comment --comment NAT-6001 -j MASQUERADE
-A POSTROUTING -o eth2 -m comment --comment NAT-6002 -j MASQUERADE

-A PREROUTING -j VYATTA_FW_IN_HOOK
-A INPUT -j VYATTA_WLBL_BALANCE
-A INPUT -j VYATTA_WLBL_FAILOVER
-A FORWARD -j VYATTA_WLBI_BALANCE
-A FORWARD -j VYATTA_WLBI_FAILOVER
-A OUTPUT -j VYATTA_WLBO_BALANCE
-A OUTPUT -j VYATTA_WLBO_FAILOVER
-A POSTROUTING -j VYATTA_FW_OUT_HOOK
-A VYATTA_FW_IN_HOOK -i eth0 -j WLB
-A VYATTA_WLBE_BALANCE -o eth1 -j RETURN
-A VYATTA_WLBE_BALANCE -o eth2 -j RETURN
-A VYATTA_WLBE_BALANCE -j ACCEPT
-A VYATTA_WLBE_FAILOVER -o eth1 -j RETURN
-A VYATTA_WLBE_FAILOVER -o eth2 -j RETURN
-A VYATTA_WLBE_FAILOVER -j ACCEPT
-A VYATTA_WLBI_BALANCE -j CONNMARK --restore-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLBI_BALANCE -m mark ! --mark 0x0 -j RETURN
-A VYATTA_WLBI_BALANCE -i eth1 -m state --state NEW -j MARK --set-xmark 0x800000c8/0xffffffff
-A VYATTA_WLBI_BALANCE -i eth2 -m state --state NEW -j MARK --set-xmark 0x800000c9/0xffffffff
-A VYATTA_WLBI_BALANCE -m mark ! --mark 0x0 -j CONNMARK --save-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLBI_BALANCE -j RETURN
-A VYATTA_WLBI_FAILOVER -j CONNMARK --restore-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLBI_FAILOVER -m mark ! --mark 0x0 -j RETURN
-A VYATTA_WLBI_FAILOVER -i eth1 -m state --state NEW -j MARK --set-xmark 0x800000ca/0xffffffff
-A VYATTA_WLBI_FAILOVER -i eth2 -m state --state NEW -j MARK --set-xmark 0x800000cb/0xffffffff
-A VYATTA_WLBI_FAILOVER -m mark ! --mark 0x0 -j CONNMARK --save-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLBI_FAILOVER -j RETURN
-A VYATTA_WLBL_BALANCE -j CONNMARK --restore-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLBL_BALANCE -m mark ! --mark 0x0 -j RETURN
-A VYATTA_WLBL_BALANCE -i eth1 -m state --state NEW -j MARK --set-xmark 0x800000c8/0xffffffff
-A VYATTA_WLBL_BALANCE -i eth2 -m state --state NEW -j MARK --set-xmark 0x800000c9/0xffffffff
-A VYATTA_WLBL_BALANCE -m mark ! --mark 0x0 -j CONNMARK --save-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLBL_BALANCE -j RETURN
-A VYATTA_WLBL_FAILOVER -j CONNMARK --restore-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLBL_FAILOVER -m mark ! --mark 0x0 -j RETURN
-A VYATTA_WLBL_FAILOVER -i eth1 -m state --state NEW -j MARK --set-xmark 0x800000ca/0xffffffff
-A VYATTA_WLBL_FAILOVER -i eth2 -m state --state NEW -j MARK --set-xmark 0x800000cb/0xffffffff
-A VYATTA_WLBL_FAILOVER -m mark ! --mark 0x0 -j CONNMARK --save-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLBL_FAILOVER -j RETURN
-A VYATTA_WLBO_BALANCE -j VYATTA_WLBE_BALANCE
-A VYATTA_WLBO_BALANCE -j CONNMARK --restore-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLBO_BALANCE -m mark ! --mark 0x0 -j RETURN
-A VYATTA_WLBO_BALANCE -o eth1 -p icmp -j MARK --set-xmark 0x800000c8/0xffffffff
-A VYATTA_WLBO_BALANCE -o eth2 -p icmp -j MARK --set-xmark 0x800000c9/0xffffffff
-A VYATTA_WLBO_BALANCE -m mark ! --mark 0x0 -j RETURN
-A VYATTA_WLBO_BALANCE -m state --state NEW -m dyn_random --prob-name "BALANCE"  -j MARK --set-xmark 0x800000c8/0xffffffff
-A VYATTA_WLBO_BALANCE -m state --state NEW -m mark --mark 0x0 -j MARK --set-xmark 0x800000c9/0xffffffff
-A VYATTA_WLBO_BALANCE -m mark ! --mark 0x0 -j CONNMARK --save-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLBO_BALANCE -j RETURN
-A VYATTA_WLBO_FAILOVER -j VYATTA_WLBE_FAILOVER
-A VYATTA_WLBO_FAILOVER -j CONNMARK --restore-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLBO_FAILOVER -m mark ! --mark 0x0 -j RETURN
-A VYATTA_WLBO_FAILOVER -o eth1 -p icmp -j MARK --set-xmark 0x800000ca/0xffffffff
-A VYATTA_WLBO_FAILOVER -o eth2 -p icmp -j MARK --set-xmark 0x800000cb/0xffffffff
-A VYATTA_WLBO_FAILOVER -m mark ! --mark 0x0 -j RETURN
-A VYATTA_WLBO_FAILOVER -m state --state NEW -m dyn_random --prob-name "FAILOVER"  -j MARK --set-xmark 0x800000ca/0xffffffff
-A VYATTA_WLBO_FAILOVER -m state --state NEW -m mark --mark 0x0 -j MARK --set-xmark 0x800000cb/0xffffffff
-A VYATTA_WLBO_FAILOVER -m mark ! --mark 0x0 -j CONNMARK --save-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLBO_FAILOVER -j RETURN
-A VYATTA_WLB_BALANCE -j CONNMARK --restore-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLB_BALANCE -m mark ! --mark 0x0 -j RETURN
-A VYATTA_WLB_BALANCE -m state --state NEW -m dyn_random --prob-name "BALANCE"  -j MARK --set-xmark 0x800000c8/0xffffffff
-A VYATTA_WLB_BALANCE -m state --state NEW -m mark --mark 0x0 -j MARK --set-xmark 0x800000c9/0xffffffff
-A VYATTA_WLB_BALANCE -j CONNMARK --save-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLB_BALANCE -j RETURN
-A VYATTA_WLB_FAILOVER -j CONNMARK --restore-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLB_FAILOVER -m mark ! --mark 0x0 -j RETURN
-A VYATTA_WLB_FAILOVER -m state --state NEW -m dyn_random --prob-name "FAILOVER"  -j MARK --set-xmark 0x800000ca/0xffffffff
-A VYATTA_WLB_FAILOVER -m state --state NEW -m mark --mark 0x0 -j MARK --set-xmark 0x800000cb/0xffffffff
-A VYATTA_WLB_FAILOVER -j CONNMARK --save-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A VYATTA_WLB_FAILOVER -j RETURN
-A WLB -p tcp -m comment --comment WLB-10 -m set --match-set WLB-PORT dst -j VYATTA_WLB_FAILOVER
-A WLB -p udp -m comment --comment WLB-10 -m set --match-set WLB-PORT dst -j VYATTA_WLB_FAILOVER
-A WLB -m comment --comment WLB-20 -m set --match-set WLB-ADDRESS src -j VYATTA_WLB_FAILOVER
-A WLB -m comment --comment WLB-100 -j VYATTA_WLB_BALANCE
-A WLB -m comment --comment "WLB-10000 default-action accept" -j RETURN