1:PREROUTING 2*mangle 3-m rpfilter;=;OK 4-m rpfilter --loose --validmark --accept-local --invert;=;OK 5