1 :PREROUTING 2 *mangle 3 -m rpfilter;=;OK 4 -m rpfilter --loose --validmark --accept-local --invert;=;OK 5