@IPCHAINS@ -A output -i @INTDEV@ -s @INTIP@ 32769:65535 -d @INTNET@ 33434:33523 -p udp -j ACCEPT
@IPCHAINS@ -A input -i @INTDEV@ -s @INTNET@ -d @INTIP@ -p icmp --icmp-type time-exceeded -j ACCEPT
@IPCHAINS@ -A input -i @INTDEV@ -s @INTNET@ -d @INTIP@ -p icmp --icmp-type destination-unreachable -j ACCEPT
