table ip filter {
	chain ts-input {
		ip saddr 100.116.93.90 iifname "lo" counter packets 370 bytes 917341 accept
		iifname "tailscale0" counter packets 6065 bytes 2998028 accept
		udp dport 41641 counter packets 50512 bytes 6242168 accept
		ip saddr 100.115.92.0/23 iifname != "tailscale0" counter packets 0 bytes 0 return
		ip saddr 100.64.0.0/10 iifname != "tailscale0" counter packets 0 bytes 0 drop
	}

	chain ts-forward {
		iifname "tailscale0" counter packets 0 bytes 0 meta mark set mark and 0xff00ffff xor 0x40000
		meta mark & 0x00ff0000 == 0x00040000 counter packets 0 bytes 0 accept
		ip saddr 100.64.0.0/10 oifname "tailscale0" counter packets 0 bytes 0 drop
		oifname "tailscale0" counter packets 0 bytes 0 accept
	}

	chain INPUT {
		type filter hook input priority filter; policy accept;
		counter packets 1827769 bytes 736663154 jump ts-input
	}

	chain FORWARD {
		type filter hook forward priority filter; policy accept;
		counter packets 0 bytes 0 jump ts-forward
	}
}
table ip nat {
	chain ts-postrouting {
		meta mark & 0x00ff0000 == 0x00040000 counter packets 0 bytes 0 masquerade
	}

	chain POSTROUTING {
		type nat hook postrouting priority srcnat; policy accept;
		counter packets 51604 bytes 3292482 jump ts-postrouting
	}
}
table ip6 filter {
	chain ts-input {
		ip6 saddr fd7a:115c:a1e0::283b:5d5b iifname "lo" counter packets 0 bytes 0 accept
		iifname "tailscale0" counter packets 0 bytes 0 accept
		udp dport 41641 counter packets 0 bytes 0 accept
	}

	chain ts-forward {
		iifname "tailscale0" counter packets 0 bytes 0 meta mark set mark and 0xff00ffff xor 0x40000
		meta mark & 0x00ff0000 == 0x00040000 counter packets 0 bytes 0 accept
		oifname "tailscale0" counter packets 0 bytes 0 accept
	}

	chain INPUT {
		type filter hook input priority filter; policy accept;
		counter packets 323124 bytes 66610848 jump ts-input
	}

	chain FORWARD {
		type filter hook forward priority filter; policy accept;
		counter packets 0 bytes 0 jump ts-forward
	}
}
table ip6 nat {
	chain ts-postrouting {
		meta mark & 0x00ff0000 == 0x00040000 counter packets 0 bytes 0 xt target "MASQUERADE"
	}

	chain POSTROUTING {
		type nat hook postrouting priority srcnat; policy accept;
		counter packets 33126 bytes 2880233 jump ts-postrouting
	}
}
table ip mangle {
	chain PREROUTING {
		type filter hook prerouting priority mangle; policy accept;
		ct state related,established counter packets 1617430 bytes 667495621 meta mark set ct mark and 0xff0000
	}

	chain OUTPUT {
		type route hook output priority mangle; policy accept;
		ct state new meta mark & 0x00ff0000 != 0x00000000 counter packets 121313 bytes 15069597 ct mark set mark and 0xff0000
	}
}
table ip6 mangle {
	chain PREROUTING {
		type filter hook prerouting priority mangle; policy accept;
		ct state related,established counter packets 95628 bytes 21385220 meta mark set ct mark and 0xff0000
	}

	chain OUTPUT {
		type route hook output priority mangle; policy accept;
		ct state new meta mark & 0x00ff0000 != 0x00000000 counter packets 80348 bytes 10585336 ct mark set mark and 0xff0000
	}
}