1iptables-translate -A INPUT -m ecn --ecn-ip-ect 0 2nft add rule ip filter INPUT ip ecn not-ect counter 3 4iptables-translate -A INPUT -m ecn --ecn-ip-ect 1 5nft add rule ip filter INPUT ip ecn ect1 counter 6 7iptables-translate -A INPUT -m ecn --ecn-ip-ect 2 8nft add rule ip filter INPUT ip ecn ect0 counter 9 10iptables-translate -A INPUT -m ecn --ecn-ip-ect 3 11nft add rule ip filter INPUT ip ecn ce counter 12 13iptables-translate -A INPUT -m ecn ! --ecn-ip-ect 0 14nft add rule ip filter INPUT ip ecn != not-ect counter 15 16iptables-translate -A INPUT -m ecn ! --ecn-ip-ect 1 17nft add rule ip filter INPUT ip ecn != ect1 counter 18 19iptables-translate -A INPUT -m ecn ! --ecn-ip-ect 2 20nft add rule ip filter INPUT ip ecn != ect0 counter 21 22iptables-translate -A INPUT -m ecn ! --ecn-ip-ect 3 23nft add rule ip filter INPUT ip ecn != ce counter 24 25iptables-translate -A INPUT -m ecn ! --ecn-tcp-ece 26nft add rule ip filter INPUT tcp flags != ecn counter 27 28iptables-translate -A INPUT -m ecn --ecn-tcp-cwr 29nft add rule ip filter INPUT tcp flags cwr counter 30